[MDEV-10298] Improve systemd service hardening Created: 2016-06-28 Updated: 2021-08-06 Resolved: 2016-07-12 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Scripts & Clients |
| Affects Version/s: | 10.1.14 |
| Fix Version/s: | 10.1.16 |
| Type: | Bug | Priority: | Major |
| Reporter: | Craig Andrews | Assignee: | Sergey Vojtovich |
| Resolution: | Fixed | Votes: | 1 |
| Labels: | contribution, foundation, patch, systemd | ||
| Environment: |
systemd, Gentoo |
||
| Issue Links: |
|
||||||||||||||||||||||||||||||||
| Sprint: | 1.0.2 | ||||||||||||||||||||||||||||||||
| Description |
|
It would be nice to use more of systemd's hardening features:
I tested these settings and didn't experience any problems in my (admitted limited) setup. I think they should be fine for anyone except for exceptional and odd situations. For the (very rare) impacted user, they can always override the systemd service - but a secure configuration should be the default. |
| Comments |
| Comment by Craig Andrews [ 2016-06-28 ] |
| Comment by Sergey Vojtovich [ 2016-07-12 ] |
|
serg, could you also have a look at this patch? Yet I couldn't foresee any problems that it may cause. |
| Comment by Sergei Golubchik [ 2016-07-12 ] |
|
ok to push |