From 9fb56c031bb5cbd1e00362e847e08be811bcb877 Mon Sep 17 00:00:00 2001 From: jvoisin Date: Fri, 5 Apr 2019 19:51:15 +0200 Subject: [PATCH] Fix the systemd unit file for OpenJDK --- contrib/airsonic.service | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/contrib/airsonic.service b/contrib/airsonic.service index 5cf08590..62a4e61c 100644 --- a/contrib/airsonic.service +++ b/contrib/airsonic.service @@ -24,7 +24,6 @@ Group=airsonic # See https://www.freedesktop.org/software/systemd/man/systemd.exec.html # for details DevicePolicy=closed -MemoryDenyWriteExecute=yes NoNewPrivileges=yes PrivateDevices=yes PrivateTmp=yes @@ -45,6 +44,11 @@ ProtectSystem=full #ProtectSystem=strict #ReadWritePaths=/var/airsonic +# You can uncomment the following line if you're not using the OpenJDK. +# This will prevent processes from having a memory zone that is both writeable +# and executeable, making hacker's lifes a bit harder. +#MemoryDenyWriteExecute=yes + [Install] WantedBy=multi-user.target