diff options
Diffstat (limited to 'sys-utils/fstrim.service.in')
| -rw-r--r-- | sys-utils/fstrim.service.in | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/sys-utils/fstrim.service.in b/sys-utils/fstrim.service.in index fb5a831ff..d58accd7f 100644 --- a/sys-utils/fstrim.service.in +++ b/sys-utils/fstrim.service.in @@ -5,3 +5,13 @@ Documentation=man:fstrim(8) [Service] Type=oneshot ExecStart=@sbindir@/fstrim --fstab --verbose +ProtectSystem=strict +ProtectHome=yes +PrivateDevices=no +PrivateNetwork=yes +PrivateUsers=no +ProtectKernelTunables=yes +ProtectKernelModules=yes +ProtectControlGroups=yes +MemoryDenyWriteExecute=yes +SystemCallFilter=@default @file-system @basic-io @system-service |