diff options
| author | Florian Schlichting <fsfs@debian.org> | 2015-08-11 19:00:21 +0200 |
|---|---|---|
| committer | Max Kellermann <max@musicpd.org> | 2016-12-09 10:41:44 +0100 |
| commit | 54d5d9d1ccb5c91ba9521918c5261758e8a294fb (patch) | |
| tree | 7901faa9a6837b840f0164538478748fdcf36ea3 /systemd | |
| parent | 31d9aebf0b6bbc33c71420e7d4706233a5887d24 (diff) | |
systemd: protect /usr when running under systemd
Diffstat (limited to 'systemd')
| -rw-r--r-- | systemd/mpd.service.in | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/systemd/mpd.service.in b/systemd/mpd.service.in index 545c94159..c02f55e8d 100644 --- a/systemd/mpd.service.in +++ b/systemd/mpd.service.in @@ -9,6 +9,9 @@ ExecStart=@prefix@/bin/mpd --no-daemon LimitRTPRIO=50 LimitRTTIME=infinity +# disallow writing to /usr, /bin, /sbin, ... +ProtectSystem=yes + [Install] WantedBy=multi-user.target Also=mpd.socket |