diff options
| author | uvok cheetah | 2025-02-09 14:01:10 +0100 |
|---|---|---|
| committer | uvok cheetah | 2025-02-09 14:01:10 +0100 |
| commit | 51b69224c7e4bf3819dcb260f59e684c3b297cc9 (patch) | |
| tree | 1b3d21528be79b36f03cb469b93969a56f8a2964 /roles/linux-ns/files/systemd/dn42_tinc@.service | |
| parent | a2ec10dbd30a17d2ede8ae8897d9245d748c0b3f (diff) | |
Update service files
restrictions
Diffstat (limited to 'roles/linux-ns/files/systemd/dn42_tinc@.service')
| -rw-r--r-- | roles/linux-ns/files/systemd/dn42_tinc@.service | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/roles/linux-ns/files/systemd/dn42_tinc@.service b/roles/linux-ns/files/systemd/dn42_tinc@.service index 8949467..bf17815 100644 --- a/roles/linux-ns/files/systemd/dn42_tinc@.service +++ b/roles/linux-ns/files/systemd/dn42_tinc@.service @@ -1,5 +1,3 @@ -# tinc inside dn42 namespace - [Unit] Description=Tinc net %i in namespace dn42 Documentation=info:tinc @@ -24,5 +22,10 @@ BindReadOnlyPaths=/etc/netns/dn42/resolv.conf:/etc/resolv.conf ProtectSystem=strict RuntimeDirectory=./tinc/dn42/ +PrivateTmp=true +#tun +#PrivateDevices=true +PrivateIPC=true + #[Install] #WantedBy=tinc.service |