[pkg-go] Bug#950759: hardened systemd configuration

[Antoine Beaupré]

On 2020-02-08 15:38:48, Martina Ferrari wrote:
> Hi!
>
> On 05/02/2020 20:44, Antoine Beaupre wrote:
>> We recently introduced a new feature where the systemd unit file is
>> hardened. I think it would be a great addition to the Debian package
>> as well, considering that it seems to work for us. Here's the magic
>> incantation that was added:
> Thanks for the report! This seems indeed useful and a good addition.
> Sadly, I don't have the knowledge to evaluate whether these settings can
> have unintended side-effects. Have you (or anybody reading this)
> evaluated that? If so, I would be happy to apply the "patch". Maybe
> adding an one-line explanation to each line would be a good addition too.

The fact that this is running on multiple prometheus deployments feels
sufficient for me to assume this will work. There are multiple users of
this module and I assume that has been thoroughly tested...

a.
-- 
If you have come here to help me, you are wasting our time.
But if you have come because your liberation is bound up with mine, then
let us work together.    - Aboriginal activists group, Queensland, 1970s