infra/systemd

Hardening systemd It is possible to harden systemd services adding restrictions to file access, syscalls, network and more. The command: $ systemd-analyze security <service> --------- NAME DESCRIPTION EXPOSURE ✗ PrivateNetwork= Service has access to the host's network 0.5 ✗ User=/DynamicUser= Service runs as root user 0.4 ✗ CapabilityBoundingSet=~CAP_SET(UID|GID|PCAP) Service may change UID/GID…