Disable MemoryDenyWriteExecute in systemd service unit

NLnetLabs · Nov 1, 2024 · 23b9581 · 23b9581
1 parent 70a8809
commit 23b9581
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/common/rotonda.rotonda.service b/pkg/common/rotonda.rotonda.service
@@ -11,7 +11,7 @@ User=rotonda
 AmbientCapabilities=CAP_NET_BIND_SERVICE
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 LockPersonality=yes
-MemoryDenyWriteExecute=yes
+#MemoryDenyWriteExecute=yes # new roto needs this disabled
 NoNewPrivileges=yes
 PrivateDevices=yes
 PrivateTmp=yes