forked from mirrors/nixpkgs
dnscrypt-proxy service: additional hardening
Run the daemon with private /home and /run/user to prevent it from enumerating users on the system.
This commit is contained in:
parent
4001917359
commit
03bdf8f03c
|
@ -204,6 +204,7 @@ in
|
|||
|
||||
PrivateTmp = true;
|
||||
PrivateDevices = true;
|
||||
ProtectHome = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
|
Loading…
Reference in a new issue