Merge remote-tracking branch 'candrews/issue13805'

This commit is contained in:
Nick Mathewson 2015-01-11 11:24:48 -05:00
commit c98e075ebc

View file

@ -16,13 +16,13 @@ LimitNOFILE = 32768
# Hardening # Hardening
PrivateTmp = yes PrivateTmp = yes
DeviceAllow = /dev/null rw PrivateDevices = yes
DeviceAllow = /dev/urandom r ProtectHome = yes
InaccessibleDirectories = /home ProtectSystem = full
ReadOnlyDirectories = / ReadOnlyDirectories = /
ReadWriteDirectories = @LOCALSTATEDIR@/lib/tor ReadWriteDirectories = -@LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = @LOCALSTATEDIR@/log/tor ReadWriteDirectories = -@LOCALSTATEDIR@/log/tor
ReadWriteDirectories = @LOCALSTATEDIR@/run/tor ReadWriteDirectories = -@LOCALSTATEDIR@/run/tor
NoNewPrivileges = yes NoNewPrivileges = yes
[Install] [Install]