On Thu, Feb 24, 2022 at 08:13:15PM +0100, Zbigniew Jędrzejewski-Szmek wrote:
It would probably be good to use more of those features, but you
need
to understand the service very well to know what systemd security
features can be enabled for it.
I'd definitely love to see us put more effort into this — but we don't have
any specific resources for this kind of thing, so it needs to be someone's
labor of love.
See
https://pagure.io/packaging-committee/issue/667 as a first start...
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader