diff --git a/contrib/airsonic.service b/contrib/airsonic.service index 5cf08590..62a4e61c 100644 --- a/contrib/airsonic.service +++ b/contrib/airsonic.service @@ -24,7 +24,6 @@ Group=airsonic # See https://www.freedesktop.org/software/systemd/man/systemd.exec.html # for details DevicePolicy=closed -MemoryDenyWriteExecute=yes NoNewPrivileges=yes PrivateDevices=yes PrivateTmp=yes @@ -45,6 +44,11 @@ ProtectSystem=full #ProtectSystem=strict #ReadWritePaths=/var/airsonic +# You can uncomment the following line if you're not using the OpenJDK. +# This will prevent processes from having a memory zone that is both writeable +# and executeable, making hacker's lifes a bit harder. +#MemoryDenyWriteExecute=yes + [Install] WantedBy=multi-user.target