mirrors/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-20 10:12:15 +01:00
Code Issues Projects Releases Wiki Activity

Use PrivateDevices instead of DeviceAllow

Browse Source 
See 13805
This commit is contained in:
Craig Andrews 2014-11-28 12:36:17 -05:00
parent 11b652acb3
commit 1ac3b74405
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
contrib/dist/tor.service.in vendored
View File

@ -16,8 +16,7 @@ LimitNOFILE = 32768
# Hardening # Hardening
PrivateTmp = yes PrivateTmp = yes
DeviceAllow = /dev/null rw PrivateDevices = yes
DeviceAllow = /dev/urandom r
InaccessibleDirectories = /home InaccessibleDirectories = /home
ReadOnlyDirectories = / ReadOnlyDirectories = /
ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor