4 ms·
The official documentation on these directives was of great value when I started looking into unit file hardening. There were a few minor cases where I had to,
by proactivesvcs 6y ago
The official documentation on these directives was of great value when I started looking into unit file hardening. There were a few minor cases where I had to, or felt the need to go elsewhere for deeper explanation, but for the most part it was readable and comprehensive.
I was able to understand the changes that I made and while carefully testing, few unexpected problems resulted.
The changes that I applied as a result of this has meant the unit files now score around 1.5 from the "systemctl-analyze security" system. Considering I approached the process with almost no knowledge of systemd, this speaks volumes on the quality of the documentation, its timeliness and practical relevance, and the fruit that can be borne of excellent documentation.
- lovelettr 6y agoWas that the freedesktop.org wiki?
- proactivesvcs 6y agoPrimarly the systemd.exec man page at https://www.freedesktop.org/software/systemd/man/systemd.exec.html https://www.freedesktop.org/software/systemd/man/systemd.exe... , as well as the accompanying unit and service file man pages for more general reference.