systemd: protect /usr when running under systemd
This commit is contained in:
parent
21ef656e24
commit
5d13c13821
|
@ -19,6 +19,9 @@ ControlGroup=cpu:/mpd
|
||||||
# assign a real-time budget
|
# assign a real-time budget
|
||||||
ControlGroupAttribute=cpu.rt_runtime_us 500000
|
ControlGroupAttribute=cpu.rt_runtime_us 500000
|
||||||
|
|
||||||
|
# disallow writing to /usr, /bin, /sbin, ...
|
||||||
|
ProtectSystem=yes
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
Also=mpd.socket
|
Also=mpd.socket
|
||||||
|
|
Loading…
Reference in New Issue