summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rwxr-xr-xetc.bash3
1 files changed, 2 insertions, 1 deletions
diff --git a/etc.bash b/etc.bash
index 34a2894..f90599a 100755
--- a/etc.bash
+++ b/etc.bash
@@ -48,7 +48,8 @@ sudo bash -c "cat << 'EOF' > /etc/systemd/system/sshd.service.d/override.conf
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
-ReadWritePaths=/var/empty /run/sshd
+RuntimeDirectory=sshd
+ReadWritePaths=/var/empty
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes