blob: d12b40671e3745d2ca53c1b795103f195e646cdd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
|
[Service]
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/spool/cups /var/cache/cups /var/run/cups /etc/cups
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictNamespaces=yes
MemoryDenyWriteExecute=yes
|
