Re: systemd service hardening

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Craig,

On Thu, Jun 30, 2016 at 12:07 AM, Craig Andrews
<candrews@xxxxxxxxxxxxxxxx> wrote:
> I've been on a bit of a mission lately to improve the hardening of systemd
> services wherever I can find them. Today, I ran across this one.
>
> I believe the hardening of the bluetooth.service (
> https://git.kernel.org/cgit/bluetooth/bluez.git/tree/src/bluetooth.service.in
> ) can be easily improved by adding these 2 lines:
> PrivateTmp=true
> NoNewPrivileges=true
>
> If there is agreement, can a committer please make this change?

I don't see any problems in doing it, how long have them been introduced?

-- 
Luiz Augusto von Dentz
--
To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Bluez Devel]     [Linux Wireless Networking]     [Linux Wireless Personal Area Networking]     [Linux ATH6KL]     [Linux USB Devel]     [Linux Media Drivers]     [Linux Audio Users]     [Linux Kernel]     [Linux SCSI]     [Big List of Linux Books]

  Powered by Linux