Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#52178 - [privoxy] Hardening Service-File

Attached to Project: Community Packages
Opened by Michael Schönitzer (Nudin) - Friday, 16 December 2016, 15:22 GMT
Last edited by Doug Newgard (Scimmia) - Friday, 16 December 2016, 15:38 GMT
Task Type Feature Request
Category Security
Status Assigned
Assigned To Lukas Fleischer (lfleischer)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 1
Private No

Details

Is there a reason against hardening the systemd service-file? I'm running the following setup without problems:

´´´
PrivateDevices=yes
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=yes
MountFlags=slave
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
NoNewPrivileges=yes
SystemCallArchitectures=native
´´´
   privoxy_patch.txt (0.5 KiB)
This task depends upon

Comment by Doug Newgard (Scimmia) - Friday, 16 December 2016, 15:35 GMT
#1 would be that the service file comes from upstream, not from Arch.

Edit: Nevermind, I was looking at the wrong package.

Loading...