moon
/
spc-pleroma
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'no_new_privs' into 'develop' 

Add no_new_privs to OpenRC service files

See merge request pleroma/pleroma!3905
This commit is contained in:
lain 2023-06-13 13:34:21 +00:00
parent fdb5bec431 a663b73634
commit 589301ce06
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
changelog.d/no_new_privs.add Normal file
View File

@ -0,0 +1 @@
(hardening) Add no_new_privs=yes to OpenRC service files

1
installation/init.d/pleroma
View File

@ -8,6 +8,7 @@ pidfile="/var/run/pleroma.pid"
directory=/opt/pleroma directory=/opt/pleroma
healthcheck_delay=60 healthcheck_delay=60
healthcheck_timer=30 healthcheck_timer=30
no_new_privs="yes"
: ${pleroma_port:-4000} : ${pleroma_port:-4000}

1
rel/files/installation/init.d/pleroma
View File

@ -9,6 +9,7 @@ command=/opt/pleroma/bin/pleroma
command_args="start" command_args="start"
command_user=pleroma command_user=pleroma
command_background=1 command_background=1
no_new_privs="yes"
# Ask process to terminate within 30 seconds, otherwise kill it # Ask process to terminate within 30 seconds, otherwise kill it
retry="SIGTERM/30/SIGKILL/5" retry="SIGTERM/30/SIGKILL/5"