Sfoglia il codice sorgente

systemd unit file: ensures that the process and all its children can never gain
new privileges (#12939).

intrigeri 9 anni fa
parent
commit
b4170421cc
1 ha cambiato i file con 1 aggiunte e 0 eliminazioni
  1. 1 0
      contrib/dist/tor.service.in

+ 1 - 0
contrib/dist/tor.service.in

@@ -19,6 +19,7 @@ PrivateTmp = yes
 DeviceAllow = /dev/null rw
 DeviceAllow = /dev/urandom r
 InaccessibleDirectories = /home
+NoNewPrivileges = yes
 
 [Install]
 WantedBy = multi-user.target