From 40652ca4791fc3ae8f55c74b16227c0682b287b9 Mon Sep 17 00:00:00 2001
From: Topi Miettinen <topimiettinen@users.noreply.github.com>
Date: Wed, 8 Jun 2016 12:23:37 +0000
Subject: units: enable MemoryDenyWriteExecute (#3459)

Secure daemons shipped by systemd by enabling MemoryDenyWriteExecute.

Closes: #3459
---
 units/systemd-timesyncd.service.in | 1 +
 1 file changed, 1 insertion(+)

(limited to 'units/systemd-timesyncd.service.in')

diff --git a/units/systemd-timesyncd.service.in b/units/systemd-timesyncd.service.in
index a856dad709..caf1dc132f 100644
--- a/units/systemd-timesyncd.service.in
+++ b/units/systemd-timesyncd.service.in
@@ -28,6 +28,7 @@ PrivateDevices=yes
 ProtectSystem=full
 ProtectHome=yes
 WatchdogSec=3min
+MemoryDenyWriteExecute=yes
 
 [Install]
 WantedBy=sysinit.target
-- 
cgit v1.2.3-54-g00ecf