summaryrefslogtreecommitdiff
path: root/etc.bash
diff options
context:
space:
mode:
authorDenis Chevalier <perso@denischevalier.fr>2026-08-06 13:25:01 +0200
committerDenis Chevalier <perso@denischevalier.fr>2026-08-06 13:25:01 +0200
commit66f65ef6bc5692071805a928213c776a44c81bf7 (patch)
tree2043fab37dac72807f65b503d19cfdc4d91a540c /etc.bash
parentb19df97630ef273342d853a7658285f222f330b6 (diff)
downloadpostinstall-66f65ef6bc5692071805a928213c776a44c81bf7.tar.gz
postinstall-66f65ef6bc5692071805a928213c776a44c81bf7.tar.bz2
postinstall-66f65ef6bc5692071805a928213c776a44c81bf7.zip
update sshd override
Diffstat (limited to 'etc.bash')
-rwxr-xr-xetc.bash3
1 files changed, 2 insertions, 1 deletions
diff --git a/etc.bash b/etc.bash
index 34a2894..f90599a 100755
--- a/etc.bash
+++ b/etc.bash
@@ -48,7 +48,8 @@ sudo bash -c "cat << 'EOF' > /etc/systemd/system/sshd.service.d/override.conf
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
-ReadWritePaths=/var/empty /run/sshd
+RuntimeDirectory=sshd
+ReadWritePaths=/var/empty
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes