mirror/bitcoin
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: restrict abis in bitcoind.service

Browse Source 
It's recommended to restrict the possible application binary interfaces that can be used when setting `MemoryDenyWriteExecute=true` to ensure it cannot be circumvented.
This commit is contained in:
Charlie authored and GitHub committed 2023-08-24 16:54:47 -04:00
1 parent 5ce200dda2
commit 0244416aac
1 file changed
+3
Download Patch File Download Diff File Expand all files Collapse all files
contrib/init/bitcoind.service
+3
View File
@@ -81,5 +81,8 @@ PrivateDevices=true
# Deny the creation of writable and executable memory mappings. # Deny the creation of writable and executable memory mappings.
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
# Restrict ABIs to help ensure MemoryDenyWriteExecute is enforced
SystemCallArchitectures=native
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target