|
|
|
@ -51,7 +51,7 @@ in |
|
|
|
|
ProtectKernelLogs = true; |
|
|
|
|
ProtectKernelModules = true; |
|
|
|
|
ProtectKernelTunables = true; |
|
|
|
|
ProtectProc = "noaccess"; |
|
|
|
|
ProtectProc = "invisible"; |
|
|
|
|
ProtectSystem = "strict"; |
|
|
|
|
RemoveIPC = true; |
|
|
|
|
RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ]; |
|
|
|
|