Skip to content

Security/Drops the sysadmin privilege from the daemon

shibayashi requested to merge shibayashi/pleroma:systemd-drop-sysadmin-privilege into develop

The systemd manual recommends to drop this capability for the sandbox to be effective. In theory, with the sysadmin capability the sandbox restrictions could be circumvented.

Merge request reports