瀏覽代碼

systemd unit file: ensures that the process and all its children can never gain
new privileges (#12939).

intrigeri 9 年之前
父節點
當前提交
b4170421cc
共有 1 個文件被更改,包括 1 次插入0 次删除
  1. 1 0
      contrib/dist/tor.service.in

+ 1 - 0
contrib/dist/tor.service.in

@@ -19,6 +19,7 @@ PrivateTmp = yes
 DeviceAllow = /dev/null rw
 DeviceAllow = /dev/urandom r
 InaccessibleDirectories = /home
+NoNewPrivileges = yes
 
 [Install]
 WantedBy = multi-user.target