Enable systemd service hardening features for default system services This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implemented if approved by the Fedora Engineering Steering Committee. Wiki Announced This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, ...
This is good for precisely the single user case - potentially malicious services on your system can't view things they otherwise would be able to, or access resources they don't need. Even if it's under the same user.
This is good for precisely the single user case - potentially malicious services on your system can't view things they otherwise would be able to, or access resources they don't need. Even if it's under the same user.