aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDavid Runge <dave@sleepmap.de>2017-01-10 18:34:21 +0100
committerDavid Runge <dave@sleepmap.de>2017-01-10 18:34:21 +0100
commitf29d2b7fb9596a924cbc835b84b99d05bd6a806c (patch)
tree3b0aa60ea22dcf8308014a4775d1e58ef1f666b8
parentb713e692c8ace4c1f3b9daf33040e2836b0049e8 (diff)
downloaduenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.tar.gz
uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.tar.bz2
uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.tar.xz
uenv-f29d2b7fb9596a924cbc835b84b99d05bd6a806c.zip
system/rtorrent@.service: Updating Requires to openvpn >= 2.4. Adding systemd based hardening.
-rw-r--r--system/rtorrent@.service7
1 files changed, 6 insertions, 1 deletions
diff --git a/system/rtorrent@.service b/system/rtorrent@.service
index 61cfc85..daf831f 100644
--- a/system/rtorrent@.service
+++ b/system/rtorrent@.service
@@ -1,6 +1,6 @@
[Unit]
Description=rTorrent
-Requires=openvpn@secure.service
+Requires=openvpn-client@secure.service
[Service]
Type=forking
@@ -14,6 +14,11 @@ ExecStart=/usr/bin/tmux -L rt new-session -s rt -n rtorrent -d rtorrent
ExecStop=/usr/bin/tmux -L rt send-keys -t rt:rtorrent C-q
WorkingDirectory=/home/%i/Downloads/
Restart=on-failure
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectKernelTunables=true
+ProtectControlGroups=true
[Install]
WantedBy=default.target