report-basic: lock down the service
The basic approach is copied from systemd-journal-gatewayd.service, with some additions to lock down unneeded network access.
This commit is contained in:
@@ -16,6 +16,7 @@ ListenStream=/run/systemd/report/io.systemd.Basic
|
||||
FileDescriptorName=varlink
|
||||
SocketMode=0666
|
||||
Accept=yes
|
||||
MaxConnectionsPerSource=16
|
||||
RemoveOnStop=yes
|
||||
|
||||
[Install]
|
||||
|
||||
Reference in New Issue
Block a user