Beta Shell v2.0

Beta Shell v2.0 · web2.us.cloudlogin.co

[FM] [CMD] [PHP] [DB] [INFO] [SEC]

File Manager

~ /usr/lib/systemd/portable/profile/strict

3 items

Name	Size	Perms	Modified	Actions
[ .. / .. ]
service.conf	775 B	-rw-r--r--	2018-06-22 11:11:49	Edit Del

Editing: service.conf (775 B)

Path: /usr/lib/systemd/portable/profile/strict/service.confBack

# The "strict" security profile for services, all options turned on

[Service]
MountAPIVFS=yes
TemporaryFileSystem=/run
BindReadOnlyPaths=/run/systemd/notify
BindReadOnlyPaths=/dev/log /run/systemd/journal/socket /run/systemd/journal/stdout
BindReadOnlyPaths=/etc/machine-id
DynamicUser=yes
RemoveIPC=yes
CapabilityBoundingSet=
PrivateTmp=yes
PrivateDevices=yes
PrivateUsers=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictAddressFamilies=AF_UNIX
LockPersonality=yes
NoNewPrivileges=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictNamespaces=yes
SystemCallFilter=@system-service
SystemCallErrorNumber=EPERM
SystemCallArchitectures=native
PrivateNetwork=yes
IPAddressDeny=any
TasksMax=4