minor module cleanup

This commit is contained in:
Robin Appelman 2024-10-30 19:56:30 +01:00
commit 0b4d4f52df

View file

@ -101,14 +101,13 @@ in
ProtectHostname = true; ProtectHostname = true;
LockPersonality = true; LockPersonality = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
RestrictAddressFamilies = "AF_INET AF_INET6"; RestrictAddressFamilies = [ "AF_INET" "AF_INET6" ];
RestrictRealtime = true; RestrictRealtime = true;
ProtectProc = "noaccess"; ProtectProc = "noaccess";
SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ]; SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ];
IPAddressDeny = "multicast"; IPAddressDeny = "multicast";
PrivateUsers = true; PrivateUsers = true;
ProcSubset = "pid"; ProcSubset = "pid";
RuntimeDirectory = "tasmota-backup";
RestrictSUIDSGID = true; RestrictSUIDSGID = true;
}; };
}; };