Re: enforced systemd services (was: Misc Developer News (#37))

2014-11-25 Thread Marco d'Itri
On Nov 25, Arturo Borrero Gonzalez wrote: > Is there a Debian-specific policy on how to apply these directives? We are working on one, but the general idea is "please enable as many security features as feasible". :-) -- ciao, Marco pgpfFub5bB57R.pgp Description: PGP signature

Re: enforced systemd services

2014-11-25 Thread Bjørn Mork
Marc Haber writes: > Indeed. Do we really have to pull that from a video or presentation > slides? Is this part of the official systemd docs anywhere? I don't know of any collection of all security related directives, but you can find an index of all unit file directives in systemd.directives(7)

Re: enforced systemd services

2014-11-25 Thread Vincent Bernat
❦ 25 novembre 2014 10:54 +0100, Marc Haber  : >>> [12] >>> http://ftp.nluug.nl/video/nluug/2014-11-20_nj14/zaal-2/5_Lennart_Poettering_-_Systemd.webm >>> [13] http://0pointer.net/public/systemd-nluug-2014.pdf >>> >> >>This seems pretty interesting. > > Indeed. Do we really have to pull that fr

Re: enforced systemd services (was: Misc Developer News (#37))

2014-11-25 Thread Toni Mueller
Hi Marc, On Tue, Nov 25, 2014 at 10:54:39AM +0100, Marc Haber wrote: > On Tue, 25 Nov 2014 10:04:06 +0100, Arturo Borrero Gonzalez > wrote: > >On 25 November 2014 at 02:22, Paul Wise wrote: > >> [13] http://0pointer.net/public/systemd-nluug-2014.pdf > >This seems pretty interesting. > > Inde

Re: enforced systemd services (was: Misc Developer News (#37))

2014-11-25 Thread Marc Haber
On Tue, 25 Nov 2014 10:04:06 +0100, Arturo Borrero Gonzalez wrote: >On 25 November 2014 at 02:22, Paul Wise wrote: >> >> Making packages secure with systemd service files >> - >> >> Packagers of Debian software, who are needing to create systemd se