/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to intro.xml

  • Committer: Teddy Hogeborn
  • Date: 2016-03-04 22:07:35 UTC
  • Revision ID: teddy@recompile.se-20160304220735-4xeeqt5p4nhw5cuh
Restrict the Mandos server daemon in the systemd service file.

* mandos.service ([Service]/ProtectSystem): Set to "full".
 ([Service]/PrivateTmp, [Service]/PrivateDevices,
  [Service]/ProtectHome): Set to "yes".
 ([Service]/CapabilityBoundingSet): Set to "CAP_SETUID
                                    CAP_DAC_OVERRIDE CAP_NET_RAW".

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
 
<!ENTITY TIMESTAMP "2017-02-23">
 
4
<!ENTITY TIMESTAMP "2016-02-28">
5
5
<!ENTITY % common SYSTEM "common.ent">
6
6
%common;
7
7
]>
36
36
      <year>2014</year>
37
37
      <year>2015</year>
38
38
      <year>2016</year>
39
 
      <year>2017</year>
40
39
      <holder>Teddy Hogeborn</holder>
41
40
      <holder>Björn Påhlsson</holder>
42
41
    </copyright>
78
77
  <refsect1 id="introduction">
79
78
    <title>INTRODUCTION</title>
80
79
    <para>
81
 
      <!-- This paragraph is a combination and paraphrase of two
82
 
           quotes from the 1995 movie “The Usual Suspects”. -->
83
80
      You know how it is.  You’ve heard of it happening.  The Man
84
81
      comes and takes away your servers, your friends’ servers, the
85
82
      servers of everybody in the same hosting facility. The servers
382
379
    </para>
383
380
  </refsect1>
384
381
  
385
 
  <refsect1 id="bugs">
386
 
    <title>BUGS</title>
387
 
    <xi:include href="bugs.xml"/>
388
 
  </refsect1>
389
 
  
390
382
  <refsect1 id="see_also">
391
383
    <title>SEE ALSO</title>
392
384
    <para>
420
412
    <variablelist>
421
413
      <varlistentry>
422
414
        <term>
423
 
          <ulink url="https://www.recompile.se/mandos">Mandos</ulink>
 
415
          <ulink url="http://www.recompile.se/mandos">Mandos</ulink>
424
416
        </term>
425
417
        <listitem>
426
418
          <para>