diff options
| -rw-r--r-- | dot_config/systemd/user/sbuild-update.service | 18 |
1 files changed, 0 insertions, 18 deletions
diff --git a/dot_config/systemd/user/sbuild-update.service b/dot_config/systemd/user/sbuild-update.service index 82c6bb3..2d93232 100644 --- a/dot_config/systemd/user/sbuild-update.service +++ b/dot_config/systemd/user/sbuild-update.service @@ -9,21 +9,3 @@ ExecStart=%h/.local/lib/sbuild/update-chroots.sh LimitNOFILE=131072 IOSchedulingClass=idle Nice=19 - -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_CHOWN -IPAddressDeny=any -LockPersonality=true -MemoryDenyWriteExecute=true -NoNewPrivileges=true -PrivateTmp=true -PrivateDevices=true -PrivateNetwork=true -ProtectClock=true -ProtectControlGroups=true -ProtectHostname=true -RestrictAddressFamilies=AF_UNIX -RestrictNamespaces=true -RestrictRealtime=true -RestrictSUIDSGID=true -SystemCallArchitectures=native -SystemCallFilter=@system-service @chown |