This commit is contained in:
Indrajit Raychaudhuri 2025-01-19 13:50:07 -06:00 committed by GitHub
commit b72066d8ab
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -9,5 +9,31 @@ Environment=daemon_interval=5m
ExecStart=/usr/bin/ddclient --daemon ${daemon_interval} --foreground
Restart=on-failure
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~ @privileged @resources
CapabilityBoundingSet=
NoNewPrivileges=yes
ProtectControlGroups=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectProc=invisible
ProtectClock=yes
ProtectHostname=yes
ProtectSystem=yes
ProtectHome=yes
PrivateTmp=yes
PrivateDevices=yes
MemoryDenyWriteExecute=true
RestrictRealtime=yes
RestrictSUIDSGID=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
[Install]
WantedBy=multi-user.target