Improve security by enabling some of the high level systemd security hardening settings that isolate and sandbox default system services.
Owners, do not implement this work until the FESCo vote has explicitly ended. The Fedora Program Manager will create a tracking bug in Bugzilla for this Change, which is your indication to proceed. See the FESCo ticket policy and the Changes policy for more information.
REMINDER: This ticket is for FESCo members to vote on the proposal. Further discussion should happen in the devel list thread linked above.
There's still some open questions in the discussion thread. Let's finish the discussion first.
The discussion has died down and the proposal has been updated.
+1
I hope each service is tested after making these changes. And for units we take from upstream, we work to send these improvements there.
But hey, let's give this a shot. +1
APPROVED (+4, 0, -0)
Metadata Update from @ngompa: - Issue tagged with: pending announcement
Announced
Metadata Update from @sgallagh: - Issue close_status updated to: Accepted - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.