diff options
| author | Fushan Wen <qydwhotmail@gmail.com> | 2021-11-19 11:00:00 +0800 |
|---|---|---|
| committer | Fushan Wen <qydwhotmail@gmail.com> | 2021-11-19 19:06:21 +0800 |
| commit | 23d5073dcbb54f1119aea02a41baf3d7ba2d60bb (patch) | |
| tree | 42a17530fccd07d0573213bc466659b0df551b7d | |
| parent | 262063edc72c69435ce94e64a6ae40c7c12afa14 (diff) | |
| download | rabbitmq-server-git-23d5073dcbb54f1119aea02a41baf3d7ba2d60bb.tar.gz | |
Add systemd hardening parameters in rabbitmq-server.service.example
systemd offers various options to harden services. To see details please
visit https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
| -rw-r--r-- | deps/rabbit/docs/rabbitmq-server.service.example | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/deps/rabbit/docs/rabbitmq-server.service.example b/deps/rabbit/docs/rabbitmq-server.service.example index dec70eb635..69531b1ff6 100644 --- a/deps/rabbit/docs/rabbitmq-server.service.example +++ b/deps/rabbit/docs/rabbitmq-server.service.example @@ -5,6 +5,19 @@ After=network.target epmd@0.0.0.0.socket Wants=network.target epmd@0.0.0.0.socket [Service] +# Note: You *may* wish to uncomment the following lines to apply systemd +# hardening effort to RabbitMQ, to prevent your system from being illegally +# modified by undiscovered vulnerabilities in RabbitMQ. +# ProtectSystem=full +# ProtectHome=true +# PrivateDevices=true +# ProtectHostname=true +# ProtectClock=true +# ProtectKernelTunables=true +# ProtectKernelModules=true +# ProtectKernelLogs=true +# ProtectControlGroups=true +# RestrictRealtime=true Type=notify User=rabbitmq Group=rabbitmq |