summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLuke Shumaker <lukeshu@lukeshu.com>2018-01-29 16:31:32 -0500
committerLuke Shumaker <lukeshu@lukeshu.com>2018-01-29 16:33:11 -0500
commitf36f162acc8bdd881bb6b7294706752e5d0c8c00 (patch)
treea87a217464cbd9c9e503c32c76ea91328beba3ca
parent8d5d1d018397d34c9ae41a455ae7b265dc20ec7a (diff)
systemd: use ProtectSystem=strict
-rw-r--r--pristine-etc-keeper.service6
1 files changed, 5 insertions, 1 deletions
diff --git a/pristine-etc-keeper.service b/pristine-etc-keeper.service
index 4cf4305..4d27aef 100644
--- a/pristine-etc-keeper.service
+++ b/pristine-etc-keeper.service
@@ -1,4 +1,4 @@
-# Copyright 2016 Luke Shumaker
+# Copyright 2016, 2018 Luke Shumaker
# This work is free. You can redistribute it and/or modify it under the
# terms of the Do What The Fuck You Want To Public License, Version 2,
# as published by Sam Hocevar. See the COPYING file for more details.
@@ -14,4 +14,8 @@ Before=shutdown.target
# Can't use Type=oneshot because that would block when starting
Type=simple
ExecStart=/etc/etckeeper/pristine/drain
+
IOSchedulingClass=idle
+
+ProtectSystem=strict
+ReadWritePaths=/var/lib/pristine-etc /etc/.git