service hardening (systemd)
Unit settings that take extra rights away from a service: User= instead of root, ProtectSystem= (a read-only system), NoNewPrivileges=, CapabilityBoundingSet=. systemd-analyze security rates how exposed the service is.
Unit settings that take extra rights away from a service: User= instead of root, ProtectSystem= (a read-only system), NoNewPrivileges=, CapabilityBoundingSet=. systemd-analyze security rates how exposed the service is.