Merge pull request #565 from Maryse47/patch-1

unbound.service.in: Disable ProtectKernelTunables again
This commit is contained in:
Wouter Wijngaards
2021-11-05 13:21:00 +01:00
committed by GitHub
+2 -1
View File
@@ -64,7 +64,8 @@ ProtectClock=true
ProtectControlGroups=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
# This breaks using socket options like 'so-rcvbuf'. Explicitly disable for visibility.
ProtectKernelTunables=false
ProtectProc=invisible
ProtectSystem=strict
RuntimeDirectory=unbound