highperfocused/bitcoin
1
0
Fork 0
mirror of https://github.com/bitcoin/bitcoin.git synced 2025-09-25 18:11:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

security: restrict abis in bitcoind.service

Browse Source 
It's recommended to restrict the possible application binary interfaces that can be used when setting `MemoryDenyWriteExecute=true` to ensure it cannot be circumvented.
This commit is contained in:
Charlie
2023-08-24 16:54:47 -04:00
committed by GitHub
parent 5ce200dda2
commit 0244416aac
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
contrib/init/bitcoind.service
View File

@@ -81,5 +81,8 @@ PrivateDevices=true
# Deny the creation of writable and executable memory mappings.
MemoryDenyWriteExecute=true
# Restrict ABIs to help ensure MemoryDenyWriteExecute is enforced
SystemCallArchitectures=native
[Install]
WantedBy=multi-user.target