From 1842e4f8f2be20f5fead7ae2bf3a333fcdd9f81b Mon Sep 17 00:00:00 2001
From: Denis Chevalier <perso@denischevalier.fr>
Date: Thu, 6 Aug 2026 13:37:24 +0200
Subject: change systemd override installation

---
 etc/systemd/system/cups.service.d/override.conf | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 etc/systemd/system/cups.service.d/override.conf

(limited to 'etc/systemd/system/cups.service.d/override.conf')

diff --git a/etc/systemd/system/cups.service.d/override.conf b/etc/systemd/system/cups.service.d/override.conf
new file mode 100644
index 0000000..d12b406
--- /dev/null
+++ b/etc/systemd/system/cups.service.d/override.conf
@@ -0,0 +1,12 @@
+[Service]
+NoNewPrivileges=yes
+ProtectSystem=strict
+ProtectHome=yes
+ReadWritePaths=/var/spool/cups /var/cache/cups /var/run/cups /etc/cups
+PrivateTmp=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictNamespaces=yes
+MemoryDenyWriteExecute=yes
+
-- 
cgit