From f29d2b7fb9596a924cbc835b84b99d05bd6a806c Mon Sep 17 00:00:00 2001 From: David Runge Date: Tue, 10 Jan 2017 18:34:21 +0100 Subject: system/rtorrent@.service: Updating Requires to openvpn >= 2.4. Adding systemd based hardening. --- system/rtorrent@.service | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/system/rtorrent@.service b/system/rtorrent@.service index 61cfc85..daf831f 100644 --- a/system/rtorrent@.service +++ b/system/rtorrent@.service @@ -1,6 +1,6 @@ [Unit] Description=rTorrent -Requires=openvpn@secure.service +Requires=openvpn-client@secure.service [Service] Type=forking @@ -14,6 +14,11 @@ ExecStart=/usr/bin/tmux -L rt new-session -s rt -n rtorrent -d rtorrent ExecStop=/usr/bin/tmux -L rt send-keys -t rt:rtorrent C-q WorkingDirectory=/home/%i/Downloads/ Restart=on-failure +NoNewPrivileges=yes +PrivateTmp=yes +ProtectSystem=strict +ProtectKernelTunables=true +ProtectControlGroups=true [Install] WantedBy=default.target -- cgit v1.2.3