[tor-commits] [tor/master] systemd unit file: ensures that the process and all its children can never gain

commit b4170421cc58d8c57254f4224ba259e817f48869 Author: intrigeri intrigeri@boum.org Date: Wed Aug 27 03:18:26 2014 +0000

systemd unit file: ensures that the process and all its children can never gain new privileges (#12939). --- contrib/dist/tor.service.in | 1 + 1 file changed, 1 insertion(+)

diff --git a/contrib/dist/tor.service.in b/contrib/dist/tor.service.in index 2fe51c7..c4709a7 100644 --- a/contrib/dist/tor.service.in +++ b/contrib/dist/tor.service.in @@ -19,6 +19,7 @@ PrivateTmp = yes DeviceAllow = /dev/null rw DeviceAllow = /dev/urandom r InaccessibleDirectories = /home +NoNewPrivileges = yes

[Install] WantedBy = multi-user.target