diff --git a/util/endlessh.service b/util/endlessh.service index f6a0419..f2e9901 100644 --- a/util/endlessh.service +++ b/util/endlessh.service @@ -27,10 +27,11 @@ ProtectHome=true ## setcap 'cap_net_bind_service=+ep' /usr/local/bin/endlessh ## 2) uncomment following line #AmbientCapabilities=CAP_NET_BIND_SERVICE +## 4) comment following line +PrivateUsers=true NoNewPrivileges=true ConfigurationDirectory=endlessh -PrivateUsers=true ProtectKernelTunables=true ProtectKernelModules=true ProtectControlGroups=true