]> git.ipfire.org Git - thirdparty/pdns.git/commit
service files: Add ProtectProc
authorPieter Lexis <pieter.lexis@powerdns.com>
Fri, 3 Dec 2021 09:37:46 +0000 (10:37 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Wed, 7 Dec 2022 09:00:36 +0000 (10:00 +0100)
commit3a0c3b6812769bc4653e8e04166687ef4a04b20e
treede3d2e666fe2f0bdd915f821759922812cd7707c
parent8484d01c5f5cdf27312cfd747744c7b0c25dd24f
service files: Add ProtectProc

Another sandboxing option,
[ProtectProc](https://www.freedesktop.org/software/systemd/man/systemd.exec.html#ProtectProc=)
hides all /proc/<pid> that are not owned by the service user and hides
some kernel things from /proc as well.
m4/systemd.m4
pdns/Makefile.am
pdns/dnsdistdist/Makefile.am
pdns/dnsdistdist/dnsdist.service.in
pdns/ixfrdist.service.in
pdns/pdns.service.in
pdns/recursordist/Makefile.am
pdns/recursordist/pdns-recursor.service.in