[tor-bugs] #13805 [Tor]: Improve hardening in tor.service

[Tor Bug Tracker & Wiki]

#13805: Improve hardening in tor.service
--------------------------+--------------------------------
     Reporter:  candrews  |      Owner:  intrigeri
         Type:  defect    |     Status:  assigned
     Priority:  normal    |  Milestone:  Tor: 0.2.6.x-final
    Component:  Tor       |    Version:
   Resolution:            |   Keywords:  systemd
Actual Points:            |  Parent ID:
       Points:            |
--------------------------+--------------------------------

Comment (by intrigeri):

 Replying to [comment:3 candrews]:
 > Gentoo also suggests these 2 changes:

 Let's focus on the filesystem and capabilities hardening here. (I may even
 split this ticket into two, one about filesystem hardening, another one
 about the capabilities thing.)

 So, please file one ticket per set of suggested independent changes. Same
 TimeoutStopSec and LimitNOFILE. Thanks!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13805#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online