Add some sandboxing
This commit is contained in:
parent
4ff54e8fdf
commit
01d5c9aec1
1 changed files with 1 additions and 1 deletions
|
@ -5,7 +5,7 @@
|
|||
|
||||
type = process
|
||||
# change the following line based on where the executable is
|
||||
command = /usr/bin/env PORT=/srv/http/pages/status /opt/status/status
|
||||
command = /usr/bin/bwrap --bind / / --tmpfs /home --unshare-all --share-net /opt/status/status
|
||||
working-dir = /opt/status
|
||||
logfile = $HOME/.log/exozyme-status.log
|
||||
load-options = sub-vars
|
||||
|
|
Loading…
Reference in a new issue