summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCoprDistGit <infra@openeuler.org>2024-10-18 01:18:25 +0000
committerCoprDistGit <infra@openeuler.org>2024-10-18 01:18:25 +0000
commitc6fbd54390e5355509c8cf8428041894787871c5 (patch)
tree3ca2ffd4b4f8b06e66c97b07b62bcf2ee1e136b3
parent5f235febc4746e03919ce15b8d4fb0b69895aea2 (diff)
-rw-r--r--valkey.service11
1 files changed, 11 insertions, 0 deletions
diff --git a/valkey.service b/valkey.service
index b7d58f3..1689387 100644
--- a/valkey.service
+++ b/valkey.service
@@ -16,6 +16,17 @@ User=valkey
Group=valkey
RuntimeDirectory=valkey
RuntimeDirectoryMode=0755
+PrivateTmp=true
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
[Install]
WantedBy=multi-user.target