aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2015-06-27 21:48:54 +0200
committerGravatar Christian Hesse <mail@eworm.de>2015-06-27 21:48:54 +0200
commite030b496f5c1e99c1d3090aaadeb0ba9badafc49 (patch)
tree996e34a700b1bbc0186bccd4de4e1c9ee3e7e979
parent372bdfdb93df916559c278a77f936b9ebbb0c65f (diff)
downloaddyndhcpd-e030b496f5c1e99c1d3090aaadeb0ba9badafc49.tar.gz
dyndhcpd-e030b496f5c1e99c1d3090aaadeb0ba9badafc49.tar.zst
add some extra security to systemd unit
-rw-r--r--dyndhcpd@.service4
1 files changed, 4 insertions, 0 deletions
diff --git a/dyndhcpd@.service b/dyndhcpd@.service
index 42550f1..ce49fd8 100644
--- a/dyndhcpd@.service
+++ b/dyndhcpd@.service
@@ -4,6 +4,10 @@ After=network.target
[Service]
ExecStart=/usr/bin/dyndhcpd -i%i
+ProtectSystem=full
+ProtectHome=on
+PrivateDevices=on
+NoNewPrivileges=on
[Install]
WantedBy=multi-user.target