From: Ruben Kerkhof <ruben@rubenkerkhof.com>
Date: Wed, 4 Feb 2015 10:13:07 +0000 (+0100)
Subject: Mount /home and /run/user read-only
X-Git-Tag: dnsdist-1.0.0-alpha1~306^2~4^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6ef854928aa06bb9daeae76c1fd9064f6a6f1dc0;p=thirdparty%2Fpdns.git

Mount /home and /run/user read-only
---

diff --git a/contrib/systemd-pdns-recursor.service b/contrib/systemd-pdns-recursor.service
index e1d9420bef..152763e196 100644
--- a/contrib/systemd-pdns-recursor.service
+++ b/contrib/systemd-pdns-recursor.service
@@ -12,6 +12,7 @@ PrivateDevices=true
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 NoNewPrivileges=true
 ProtectSystem=full
+ProtectHome=true
 
 [Install]
 WantedBy=multi-user.target