phantom/bitcoin
1
0
Fork 0
mirror of https://github.com/bitcoin/bitcoin.git synced 2025-01-09 11:27:28 -03:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

security: restrict abis in bitcoind.service

Browse source 
It's recommended to restrict the possible application binary interfaces that can be used when setting `MemoryDenyWriteExecute=true` to ensure it cannot be circumvented.
This commit is contained in:
Charlie 2023-08-24 16:54:47 -04:00 committed by GitHub
parent 5ce200dda2
commit 0244416aac
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
contrib/init/bitcoind.service
View file

@ -81,5 +81,8 @@ PrivateDevices=true
# Deny the creation of writable and executable memory mappings. # Deny the creation of writable and executable memory mappings.
MemoryDenyWriteExecute=true MemoryDenyWriteExecute=true
# Restrict ABIs to help ensure MemoryDenyWriteExecute is enforced
SystemCallArchitectures=native
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target