diff options
| -rwxr-xr-x | etc.bash | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -48,7 +48,8 @@ sudo bash -c "cat << 'EOF' > /etc/systemd/system/sshd.service.d/override.conf NoNewPrivileges=yes ProtectSystem=strict ProtectHome=read-only -ReadWritePaths=/var/empty /run/sshd +RuntimeDirectory=sshd +ReadWritePaths=/var/empty PrivateTmp=yes ProtectKernelTunables=yes ProtectKernelModules=yes |
