update to 24.05

2024-08-19 21:29:41 -07:00
parent fb9d892015
commit afb1c0efb4
18 changed files with 93 additions and 244 deletions
@@ -68,14 +68,10 @@ in
        Group = cfg.group;
        DevicePolicy = "closed";
        NoNewPrivileges = " yes";
-        PrivateTmp = "yes";
-        PrivateUsers = "yes";
        ProtectControlGroups = "yes";
        ProtectKernelModules = "yes";
        ProtectKernelTunables = "yes";
        RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
-        RestrictNamespaces = "yes";
-        RestrictRealtime = "yes";
        SystemCallFilter = "~@clock @debug @module @mount @obsolete @privileged @reboot @setuid @swap";
        ReadWritePaths = dataFolder;
        StateDirectory = baseNameOf dataFolder;