From 30c52c6fd758059604b44564384ae919940cf994 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sat, 16 May 2020 04:07:47 +0200
Subject: antilop: Upgrade baseline to Debian 10.

---
 roles/lists/files/etc/systemd/system/wwsympa.service | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

(limited to 'roles/lists/files/etc/systemd/system/wwsympa.service')

diff --git a/roles/lists/files/etc/systemd/system/wwsympa.service b/roles/lists/files/etc/systemd/system/wwsympa.service
index 3f76aca..1d302ef 100644
--- a/roles/lists/files/etc/systemd/system/wwsympa.service
+++ b/roles/lists/files/etc/systemd/system/wwsympa.service
@@ -12,16 +12,15 @@ ExecStart=/usr/lib/cgi-bin/sympa/wwsympa.fcgi
 
 # Hardening
 NoNewPrivileges=yes
-PrivateDevices=yes
-ProtectHome=yes
-ProtectSystem=strict
-PrivateTmp=yes
 ReadWriteDirectories=/etc/sympa
 ReadWriteDirectories=/var/lib/sympa
-ReadWriteDirectories=-/var/run/sympa
 ReadWriteDirectories=/var/spool/sympa
+RuntimeDirectory=sympa
 PrivateDevices=yes
 PrivateNetwork=yes
+ProtectHome=yes
+ProtectSystem=strict
+PrivateTmp=yes
 ProtectControlGroups=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
-- 
cgit v1.2.3