AkkomaGang/akkoma
AkkomaGang/akkoma
15
66
Fork 94
Code Issues 182 Pull requests 28 Projects 2 Releases 14 Packages Wiki Activity

Add no_new_privs hardening to OpenRC and systemd service files #575

Merged
floatingghost merged 3 commits from norm/akkoma:no-new-privs into develop 2023-07-27 12:54:45 +00:00
Conversation 2 Commits 3 Files changed 4 +2
2 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 166ddebdbc - Show all commits

1
installation/init.d/akkoma
View file

@ -8,6 +8,7 @@ pidfile="/var/run/akkoma.pid"
directory=/opt/akkoma
healthcheck_delay=60
healthcheck_timer=30
no_new_privs="yes"
: ${akkoma_port:-4000}

1
rel/files/installation/init.d/akkoma
View file

@ -9,6 +9,7 @@ command=/opt/akkoma/bin/pleroma
command_args="start"
command_user=akkoma
command_background=1
no_new_privs="yes"
# Ask process to terminate within 30 seconds, otherwise kill it
retry="SIGTERM/30/SIGKILL/5"