Improve systemd security settings #354
No reviewers
Labels
No Label
bug
data loss
design finalized
good first issue
new feature area
question / support
security
waiting for response
No Milestone
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: borgmatic-collective/borgmatic#354
Loading…
Reference in New Issue
No description provided.
Delete Branch "palto42/borgmatic:systemd-security"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
As discussed in #352, I added some systemd security settings in the sampe file
bormatic.service
together with some hints in theschema.yaml
and the setup how-to.I decided for less strict system protection as default setting to avoid issues with backup to local file system. The comments in the systemd file should allow users to enable strict protection and allow write access only for required paths.
Looks great! Thanks again for your persistence here. This'll be part of the next release.