summaryrefslogtreecommitdiffstats
path: root/src/portable/profile/trusted
diff options
context:
space:
mode:
Diffstat (limited to 'src/portable/profile/trusted')
-rw-r--r--src/portable/profile/trusted/service.conf8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/portable/profile/trusted/service.conf b/src/portable/profile/trusted/service.conf
new file mode 100644
index 0000000..04deeb2
--- /dev/null
+++ b/src/portable/profile/trusted/service.conf
@@ -0,0 +1,8 @@
+# The "trusted" profile for services, i.e. no restrictions are applied apart from a private /tmp
+
+[Service]
+MountAPIVFS=yes
+PrivateTmp=yes
+BindPaths=/run
+BindReadOnlyPaths=/etc/machine-id
+BindReadOnlyPaths=/etc/resolv.conf