Lintian tag: systemd-service-file-missing-hardening-features

Type: pedantic

Description (from lintian-explain-tags)

The specified systemd .service file does not appear to enable any
hardening options.

systemd has support for many security-oriented features such as isolating
services from the network, private /tmp directories, as well as control
over making directories appear read-only or even inaccessible, etc.

Please consider supporting some options, collaborating upstream where
necessary about any potential changes.

Please refer to the systemd.service(5) manual page and
http://0pointer.de/blog/projects/security.html for details.

Visibility: pedantic
Show-Always: no
Check: systemd
This tag is experimental.

Show affected packages