Clément Michaud clems4ever

Security & Software lover, AI curious and author of the opensource Authelia project.

clems4ever / systemd_service_hardening.md

Created September 20, 2022 21:18 — forked from ageis/systemd_service_hardening.md

Options for hardening systemd service units

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict