dotya.ml/drone-ci-configs
2
0
Fork 0
Code Issues Pull Requests Releases Activity

set RestrictAddressFamilies to unix,ipv4,ipv6

Browse Source
This commit is contained in:
surtur 2022-04-20 16:54:52 +02:00
parent c27499e2d3
commit ab4e6375e0
Signed by: wanderer
GPG Key ID: 19CE1EC1D9E0486D
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/systemd/system/drone.service
View File

@ -37,6 +37,7 @@ ProtectKernelLogs=true
ProtectControlGroups=true ProtectControlGroups=true
LockPersonality=true LockPersonality=true
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictRealtime=true RestrictRealtime=true
RestrictSUIDSGID=true RestrictSUIDSGID=true
SystemCallArchitectures=native SystemCallArchitectures=native