<feed xmlns='http://www.w3.org/2005/Atom'>
<title>fripost-ansible/roles/MSA/files/etc/systemd/system, branch master</title>
<subtitle>Fripost ansible scripts</subtitle>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/'/>
<entry>
<title>postfix-sender-login: Better hardening.</title>
<updated>2020-05-21T01:40:53+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2020-05-20T13:46:27+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=6d1daa0424c168eae4bfa9f6772add3f77ec506f'/>
<id>6d1daa0424c168eae4bfa9f6772add3f77ec506f</id>
<content type='text'>
Run as a dedicated user, not ‘postfix’.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Run as a dedicated user, not ‘postfix’.
</pre>
</div>
</content>
</entry>
<entry>
<title>systemd.service: Tighten hardening options.</title>
<updated>2018-12-09T19:25:40+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2018-12-09T17:15:10+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=2147ff3bd9091b88960e2243b2d7d76d03cadc89'/>
<id>2147ff3bd9091b88960e2243b2d7d76d03cadc89</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>systemd: Replace ‘ProtectSystem=full’ with ‘ProtectSystem=strict’.</title>
<updated>2018-12-09T19:25:39+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2018-12-08T00:06:06+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=6a57ea01fd48992883d6dac1b7746e79202215e4'/>
<id>6a57ea01fd48992883d6dac1b7746e79202215e4</id>
<content type='text'>
And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
And remove ‘ReadOnlyDirectories=/’ as it's implied by ‘ProtectSystem=strict’.
</pre>
</div>
</content>
</entry>
<entry>
<title>move postfix-sender-login.{service,socket} to files/.</title>
<updated>2017-06-02T12:12:32+00:00</updated>
<author>
<name>Guilhem Moulin</name>
<email>guilhem@fripost.org</email>
</author>
<published>2017-06-02T12:12:26+00:00</published>
<link rel='alternate' type='text/html' href='http://git.fripost.org/fripost-ansible/commit/?id=1395cc86969823d9972517833c614becba8660a0'/>
<id>1395cc86969823d9972517833c614becba8660a0</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
</feed>
