diff options
| author | David Runge <dave@sleepmap.de> | 2017-01-10 18:34:21 +0100 |
|---|---|---|
| committer | David Runge <dave@sleepmap.de> | 2017-01-10 18:34:21 +0100 |
| commit | f29d2b7fb9596a924cbc835b84b99d05bd6a806c (patch) | |
| tree | 3b0aa60ea22dcf8308014a4775d1e58ef1f666b8 | |
| parent | b713e692c8ace4c1f3b9daf33040e2836b0049e8 (diff) | |
| download | uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.tar.gz uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.tar.bz2 uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.tar.xz uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.zip | |
system/rtorrent@.service: Updating Requires to openvpn >= 2.4. Adding systemd based hardening.
| -rw-r--r-- | system/rtorrent@.service | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/system/rtorrent@.service b/system/rtorrent@.service index 61cfc85..daf831f 100644 --- a/system/rtorrent@.service +++ b/system/rtorrent@.service @@ -1,6 +1,6 @@ [Unit] Description=rTorrent -Requires=openvpn@secure.service +Requires=openvpn-client@secure.service [Service] Type=forking @@ -14,6 +14,11 @@ ExecStart=/usr/bin/tmux -L rt new-session -s rt -n rtorrent -d rtorrent ExecStop=/usr/bin/tmux -L rt send-keys -t rt:rtorrent C-q WorkingDirectory=/home/%i/Downloads/ Restart=on-failure +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectKernelTunables=true +ProtectControlGroups=true [Install] WantedBy=default.target |