Skip to content

Commit

Permalink
fix ubuntu 24.04 compatibility
Browse files Browse the repository at this point in the history
  • Loading branch information
reubenmiller committed Jul 21, 2024
1 parent 7407d3e commit 986d359
Showing 1 changed file with 0 additions and 20 deletions.
20 changes: 0 additions & 20 deletions src/service/monit.service
Original file line number Diff line number Diff line change
Expand Up @@ -12,25 +12,5 @@ ExecReload=/usr/bin/monit reload
Restart=on-abnormal
StandardOutput=null

# hardening options
# details: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
CapabilityBoundingSet=~CAP_SYS_ADMIN
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=yes
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/run/ /var/lib/monit/ /var/log/ /etc/tedge/ /opt/tedge-monit/
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native

[Install]
WantedBy=multi-user.target

0 comments on commit 986d359

Please sign in to comment.