Add ProtectSystem = full

See 13805
This commit is contained in:
Craig Andrews 2014-11-28 12:41:23 -05:00
parent 0c73bcd3ba
commit 5bdf12ca8a
1 changed files with 1 additions and 0 deletions

View File

@ -18,6 +18,7 @@ LimitNOFILE = 32768
PrivateTmp = yes
PrivateDevices = yes
ProtectHome = yes
ProtectSystem = full
ReadOnlyDirectories = /
ReadWriteDirectories = -@LOCALSTATEDIR@/lib/tor
ReadWriteDirectories = -@LOCALSTATEDIR@/log/tor