From 717c90a7d0138ac1cddb4456aca514756bf9da7f Mon Sep 17 00:00:00 2001 From: Dan Helfman Date: Wed, 9 Dec 2020 10:08:07 -0800 Subject: [PATCH] Clarify in systemd service file comment that security settings are optional. --- sample/systemd/borgmatic.service | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sample/systemd/borgmatic.service b/sample/systemd/borgmatic.service index c4c533f..12e75a8 100644 --- a/sample/systemd/borgmatic.service +++ b/sample/systemd/borgmatic.service @@ -7,9 +7,9 @@ ConditionACPower=true [Service] Type=oneshot -# Security settings for systemd running as root -# For more details about this settings check the systemd manuals -# https://www.freedesktop.org/software/systemd/man/systemd.exec.html +# Security settings for systemd running as root, optional but recommended to improve security. You +# can disable individual settings if they cause problems for your use case. For more details, see +# the systemd manual: https://www.freedesktop.org/software/systemd/man/systemd.exec.html LockPersonality=true # Certain borgmatic features like Healthchecks integration need MemoryDenyWriteExecute to be off. # But you can try setting it to "yes" for improved security if you don't use those features.