diff options
| -rw-r--r-- | .config/systemd/user/mpd@.service | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/.config/systemd/user/mpd@.service b/.config/systemd/user/mpd@.service index 6bde606..abf1504 100644 --- a/.config/systemd/user/mpd@.service +++ b/.config/systemd/user/mpd@.service @@ -7,6 +7,12 @@ Conflicts=mpd.service ExecStart=/usr/bin/mpd --no-daemon %h/.config/mpd/mpd-%i.conf LimitRTPRIO=75 LimitRTTIME=infinity +ProtectSystem=yes +NoNewPrivileges=yes +ProtectKernelTunables=yes +ProtectControlGroups=yes +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK +RestrictNamespaces=yes [Install] WantedBy=default.target |