mirror of
https://gitlab.com/mishakmak/pam-fprint-grosshack.git
synced 2026-04-08 20:03:34 +02:00
data: Stop privilege escalations in daemon
Using the NoNewPrivileges stanza from systemd.
This commit is contained in:
@ -26,3 +26,6 @@ ProtectKernelModules=true
|
|||||||
|
|
||||||
# Real-time
|
# Real-time
|
||||||
RestrictRealtime=true
|
RestrictRealtime=true
|
||||||
|
|
||||||
|
# Privilege escalation
|
||||||
|
NoNewPrivileges=true
|
||||||
|
|||||||
Reference in New Issue
Block a user