Explorar o código

systemd unit file: ensures that the process and all its children can never gain
new privileges (#12939).

intrigeri %!s(int64=9) %!d(string=hai) anos
pai
achega
b4170421cc
Modificáronse 1 ficheiros con 1 adicións e 0 borrados
  1. 1 0
      contrib/dist/tor.service.in

+ 1 - 0
contrib/dist/tor.service.in

@@ -19,6 +19,7 @@ PrivateTmp = yes
 DeviceAllow = /dev/null rw
 DeviceAllow = /dev/urandom r
 InaccessibleDirectories = /home
+NoNewPrivileges = yes
 
 [Install]
 WantedBy = multi-user.target