Hi

On Thu, Mar 3, 2022 at 8:18 AM Zbigniew Jędrzejewski-Szmek wrote

What do you mean by "global service overrides"?

Currently security hardening features are opt-in.  You will have to set it on a per service level.   What I would prefer to see is the ability to have an opt out of hardening features ie) the ability to set an override for all systemd services such that it uses ProtectHome as an example and then individual services can opt out.

Rahul