[pkg-bacula-devel] Hardening systemd
Carsten Leonhardt
leo at debian.org
Thu Dec 27 22:45:07 GMT 2018
Hi,
> (I may induce deja-vu here, since I am fairly sure I already wrote this
> mail, but I can't find any evidence in doing so ...)
we had the topic before, but not recently.
> I am currently experimenting with more systemd hardening options. I went
> through the list of possibilities and have been running the ones I
> patched in branch hardening-systemd since 2018-12-23 in my
> disk2disk2tape setup at home.
>
> The normal backup and catalog backups run as you would expect, restores
> also work fine and this time I double-checked all permissions, users,
> ACLs and attributes have also been restored correctly.
>
> If possible I'd like to get those options into Buster, but would like to
> run them for another week before I am sure they a) work and b) don't
> break anything.
And I remember that I thought it would be also good to use apparmor.
Or both?
Anyway, if it works and makes it more secure I don't see why not.
- Carsten
More information about the pkg-bacula-devel
mailing list