diff options
Diffstat (limited to 'etc/systemd/system/sshd.service.d')
| -rw-r--r-- | etc/systemd/system/sshd.service.d/override.conf | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/etc/systemd/system/sshd.service.d/override.conf b/etc/systemd/system/sshd.service.d/override.conf new file mode 100644 index 0000000..415a729 --- /dev/null +++ b/etc/systemd/system/sshd.service.d/override.conf @@ -0,0 +1,14 @@ +[Service] +NoNewPrivileges=yes +ProtectSystem=strict +ProtectHome=read-only +RuntimeDirectory=sshd +ReadWritePaths=/var/empty +PrivateTmp=yes +ProtectKernelTunables=yes +ProtectKernelModules=yes +ProtectControlGroups=yes +PrivateDevices=yes +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +RestrictRealtime=yes +LockPersonality=yes |