dotya.ml/ drone-ci-configs
2
0
Fork 0
Code Issues Pull Requests Releases Activity

set RestrictAddressFamilies to unix,ipv4,ipv6

This commit is contained in:
surtur 2022-04-20 16:54:52 +02:00
parent c27499e2d3
commit ab4e6375e0
Signed by: wanderer
GPG Key ID: 19CE1EC1D9E0486D
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/systemd/system/drone.service
View File

@ -37,6 +37,7 @@ ProtectKernelLogs=true
ProtectControlGroups=true
LockPersonality=true
MemoryDenyWriteExecute=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native