|
|
|
@ -28,10 +28,10 @@ MemoryDenyWriteExecute=true |
|
|
|
LockPersonality=true |
|
|
|
LockPersonality=true |
|
|
|
SystemCallFilter=@system-service |
|
|
|
SystemCallFilter=@system-service |
|
|
|
SystemCallArchitectures=native |
|
|
|
SystemCallArchitectures=native |
|
|
|
IPAddressDeny=any |
|
|
|
#IPAddressDeny=any |
|
|
|
IPAddressAllow=localhost |
|
|
|
#IPAddressAllow=localhost |
|
|
|
IPAddressAllow=127.0.0.1 |
|
|
|
#IPAddressAllow=127.0.0.1 |
|
|
|
IPAddressAllow=::1 |
|
|
|
#IPAddressAllow=::1 |
|
|
|
|
|
|
|
|
|
|
|
# Connection rate limiting |
|
|
|
# Connection rate limiting |
|
|
|
LimitNOFILE=1024 |
|
|
|
LimitNOFILE=1024 |
|
|
|
|