[pkg-bacula-devel] Hardening systemd

[Carsten Leonhardt]

Hi,

> (I may induce deja-vu here, since I am fairly sure I already wrote this
> mail, but I can't find any evidence in doing so ...)

we had the topic before, but not recently.

> I am currently experimenting with more systemd hardening options. I went
> through the list of possibilities and have been running the ones I
> patched in branch hardening-systemd since 2018-12-23 in my
> disk2disk2tape setup at home.
>
> The normal backup and catalog backups run as you would expect, restores
> also work fine and this time I double-checked all permissions, users,
> ACLs and attributes have also been restored correctly.
>
> If possible I'd like to get those options into Buster, but would like to
> run them for another week before I am sure they a) work and b) don't
> break anything.

And I remember that I thought it would be also good to use apparmor.

Or both?

Anyway, if it works and makes it more secure I don't see why not.

 - Carsten