diff options
Diffstat (limited to 'dot_config/systemd')
| -rw-r--r-- | dot_config/systemd/user/sbuild-update.service | 18 | ||||
| -rw-r--r-- | dot_config/systemd/user/symlink_gcr-ssh-agent.socket | 1 |
2 files changed, 1 insertions, 18 deletions
diff --git a/dot_config/systemd/user/sbuild-update.service b/dot_config/systemd/user/sbuild-update.service index 82c6bb3..2d93232 100644 --- a/dot_config/systemd/user/sbuild-update.service +++ b/dot_config/systemd/user/sbuild-update.service @@ -9,21 +9,3 @@ ExecStart=%h/.local/lib/sbuild/update-chroots.sh LimitNOFILE=131072 IOSchedulingClass=idle Nice=19 - -CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_CHOWN -IPAddressDeny=any -LockPersonality=true -MemoryDenyWriteExecute=true -NoNewPrivileges=true -PrivateTmp=true -PrivateDevices=true -PrivateNetwork=true -ProtectClock=true -ProtectControlGroups=true -ProtectHostname=true -RestrictAddressFamilies=AF_UNIX -RestrictNamespaces=true -RestrictRealtime=true -RestrictSUIDSGID=true -SystemCallArchitectures=native -SystemCallFilter=@system-service @chown diff --git a/dot_config/systemd/user/symlink_gcr-ssh-agent.socket b/dot_config/systemd/user/symlink_gcr-ssh-agent.socket new file mode 100644 index 0000000..dc1dc0c --- /dev/null +++ b/dot_config/systemd/user/symlink_gcr-ssh-agent.socket @@ -0,0 +1 @@ +/dev/null
\ No newline at end of file |