Fix systemd service file to set usable permissions on config directory. Additionally add protection for /home.

sipsorcery · sipsorcery · commit c6d765c93be1 · 2019-05-09T22:30:34.000+02:00
diff --git a/contrib/init/bitcoind.service b/contrib/init/bitcoind.service
@@ -38,7 +38,7 @@ RuntimeDirectoryMode=0710
 
 # /etc/bitcoin
 ConfigurationDirectory=bitcoin
-ConfigurationDirectoryMode=0710
+ConfigurationDirectoryMode=0755
 
 # /var/lib/bitcoind
 StateDirectory=bitcoind
@@ -64,5 +64,8 @@ PrivateDevices=true
 # Deny the creation of writable and executable memory mappings.
 MemoryDenyWriteExecute=true
 
+# Deny access to /home
+ProtectHome=true
+
 [Install]
 WantedBy=multi-user.target
