Topi Miettinen d8e3c31bd8 Mount all fs nosuid when NoNewPrivileges=yes ...

When `NoNewPrivileges=yes`, the service shouldn't have a need for any
setuid/setgid programs, so in case there will be a new mount namespace anyway,
mount the file systems with MS_NOSUID.

2021-05-26 17:42:39 +02:00

247 KiB

Raw Blame History

View Raw