Erik Sjölund ec2ce8cd27 Improve security of rest-server.service by restricting network access ...

This patch improves the overall security assessment score given by
`systemd-analyze security rest-server.service` from "1.3 OK" to "0.6 SAFE"
(when using systemd-analyze version 253)

* Remove `AF_INET AF_INET6` from RestrictAddressFamilies.
  Sockets originating from socket activation are not affected by the
  systemd directive RestrictAddressFamilies.
  See systemd.exec man page.

* Add `PrivateNetwork=yes`
  as recommended for socket-activated services in the systemd.socket man page

* Add dependency on rest-server.socket

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>

2023-07-17 08:52:26 +02:00

..

bsd

remove ip from freebsd example

2018-03-01 08:08:33 +01:00

compose-with-grafana

Make dashboard portable

2022-12-28 19:44:32 +01:00

systemd

Improve security of rest-server.service by restricting network access

2023-07-17 08:52:26 +02:00