diff options
| author | Ryan Kavanagh <rak@rak.ac> | 2026-07-30 08:36:38 -0400 |
|---|---|---|
| committer | Ryan Kavanagh <rak@rak.ac> | 2026-07-30 08:36:38 -0400 |
| commit | a0234a4031a1b4695cdee5f0fefad3b5d1644db4 (patch) | |
| tree | 34e0d19bc769b8fb4498380a097cb25ebd7f2575 /dot_config/systemd/user/sbuild-update.service | |
| parent | update home monitor config (diff) | |
| parent | proxyjump debian.net as well (diff) | |
Merge remote-tracking branch 'refs/remotes/origin/master'
Diffstat (limited to '')
| -rw-r--r-- | dot_config/systemd/user/sbuild-update.service | 18 |
1 files changed, 0 insertions, 18 deletions
diff --git a/dot_config/systemd/user/sbuild-update.service b/dot_config/systemd/user/sbuild-update.service index 82c6bb3..2d93232 100644 --- a/dot_config/systemd/user/sbuild-update.service +++ b/dot_config/systemd/user/sbuild-update.service @@ -9,21 +9,3 @@ ExecStart=%h/.local/lib/sbuild/update-chroots.sh LimitNOFILE=131072 IOSchedulingClass=idle Nice=19 - -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_CHOWN -IPAddressDeny=any -LockPersonality=true -MemoryDenyWriteExecute=true -NoNewPrivileges=true -PrivateTmp=true -PrivateDevices=true -PrivateNetwork=true -ProtectClock=true -ProtectControlGroups=true -ProtectHostname=true -RestrictAddressFamilies=AF_UNIX -RestrictNamespaces=true -RestrictRealtime=true -RestrictSUIDSGID=true -SystemCallArchitectures=native -SystemCallFilter=@system-service @chown |