blob: d8bc31451ccbad8cefddf0bd2b96a7d5bba5f39a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
[Service]
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/log/cups /var/spool/cups /var/cache/cups /var/run/cups /etc/cups
LogsDirectory=cups
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictNamespaces=yes
MemoryDenyWriteExecute=yes
|
