mirror of
https://github.com/drakkan/sftpgo.git
synced 2026-03-14 22:35:52 +01:00
We can tighten security by adding the following to the systemd service file: * NoNewPrivileges: should never be needed * DevicePolicy: only basics required * PrivateDevices: only needs mounted stuff, never devs * ProtectSystem: no need to change boot * RestrictAddressFamilies: INET, UNIX only Signed-off-by: Marc <mail@lpcvoid.com> |
||
|---|---|---|
| .. | ||
| com.github.drakkan.sftpgo.plist | ||
| sftpgo.service | ||