From ace895b049403752623dcbca2496c20cf64e495e Mon Sep 17 00:00:00 2001 From: Ruben Kerkhof Date: Wed, 9 Sep 2015 17:51:17 +0200 Subject: [PATCH] Mount /usr, /boot and /etc readonly --- contrib/systemd.collectd.service | 1 + 1 file changed, 1 insertion(+) diff --git a/contrib/systemd.collectd.service b/contrib/systemd.collectd.service index 6a2953a2..06591335 100644 --- a/contrib/systemd.collectd.service +++ b/contrib/systemd.collectd.service @@ -7,6 +7,7 @@ Requires=local-fs.target network.target ExecStart=/usr/sbin/collectd EnvironmentFile=-/etc/sysconfig/collectd EnvironmentFile=-/etc/default/collectd +ProtectSystem=full # Tell systemd it will receive a notification from collectd over it's control # socket once the daemon is ready. See systemd.service(5) for more details. -- 2.11.0