diff --git a/extra/systemd/pyruse-boot@.service b/extra/systemd/pyruse-boot@.service index 178429d..e415655 100644 --- a/extra/systemd/pyruse-boot@.service +++ b/extra/systemd/pyruse-boot@.service @@ -4,6 +4,7 @@ Description=Initialization of pyruse module %I [Service] Type=oneshot ExecStart=/usr/bin/pyruse-boot "%I" +WorkingDirectory=/etc/pyruse CapabilityBoundingSet=CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes diff --git a/extra/systemd/pyruse.service b/extra/systemd/pyruse.service index d15e3cd..1ee57d7 100644 --- a/extra/systemd/pyruse.service +++ b/extra/systemd/pyruse.service @@ -3,6 +3,7 @@ Description=Route systemd-journal logs to filters and actions (ban, report…) [Service] ExecStart=/usr/bin/pyruse +WorkingDirectory=/etc/pyruse CapabilityBoundingSet=CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes