Enable systemd hardening in openrgb.service

2026-07-30 23:04:03 -05:00
parent c5d088b69d
commit ccd103a29f
1 changed files with 10 additions and 0 deletions
@@ -8,5 +8,15 @@ Restart=always
 RuntimeDirectory=openrgb
 WorkingDirectory=/run/openrgb

+ProtectSystem=strict
+ProtectHome=true
+
+PrivateDevices=false
+ProtectKernelTunables=false
+ProtectControlGroups=false
+
+ReadWritePaths=/etc/openrgb
+ReadWritePaths=/run/openrgb
+
 [Install]
 WantedBy=multi-user.target