From b4170421cc58d8c57254f4224ba259e817f48869 Mon Sep 17 00:00:00 2001 From: intrigeri Date: Wed, 27 Aug 2014 03:18:26 +0000 Subject: systemd unit file: ensures that the process and all its children can never gain new privileges (#12939). --- contrib/dist/tor.service.in | 1 + 1 file changed, 1 insertion(+) diff --git a/contrib/dist/tor.service.in b/contrib/dist/tor.service.in index 2fe51c75d9..c4709a7fd6 100644 --- a/contrib/dist/tor.service.in +++ b/contrib/dist/tor.service.in @@ -19,6 +19,7 @@ PrivateTmp = yes DeviceAllow = /dev/null rw DeviceAllow = /dev/urandom r InaccessibleDirectories = /home +NoNewPrivileges = yes [Install] WantedBy = multi-user.target -- cgit v1.2.3-54-g00ecf