strepsirrhini/libreoffice-online
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

service: enable sandboxing options

Browse source 
See also https://www.freedesktop.org/software/systemd/man/systemd.exec.html#Sandboxing

Change-Id: I7ae1070c170db2f91dbeb177f03390a0b45143eb
Reviewed-on: https://gerrit.libreoffice.org/c/online/+/88128
Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com>
Reviewed-by: Jan Holesovsky <kendy@collabora.com>
This commit is contained in:
Martin Milata 2020-02-06 18:43:58 +01:00 committed by Jan Holesovsky
parent d91e5cd682
commit 40da3305b4
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
loolwsd.service
View file

@ -11,5 +11,13 @@ User=lool
KillMode=control-group
Restart=always
ProtectSystem=strict
ReadWritePaths=/opt/lool
ProtectHome=yes
PrivateTmp=yes
ProtectControlGroups=yes
CapabilityBoundingSet=CAP_FOWNER CAP_MKNOD CAP_SYS_CHROOT
[Install]
WantedBy=multi-user.target