From 00cfb36e20e3c35db2150e7d0351ad7b8442e2d8 Mon Sep 17 00:00:00 2001 From: Luiz Augusto von Dentz Date: Tue, 19 Apr 2022 11:18:59 -0700 Subject: [PATCH] bluetooth.service: Set ConfigurationDirectoryMode This sets ConfigurationDirectoryMode to 0555 to really enforce the ConfigurationDirectory to be read-only [1]. [1] https://github.com/bluez/bluez/issues/329#issuecomment-1102459104 --- src/bluetooth.service.in | 1 + 1 file changed, 1 insertion(+) diff --git a/src/bluetooth.service.in b/src/bluetooth.service.in index 4ea98b506..beb98ce0c 100644 --- a/src/bluetooth.service.in +++ b/src/bluetooth.service.in @@ -22,6 +22,7 @@ ProtectControlGroups=true StateDirectory=bluetooth StateDirectoryMode=0700 ConfigurationDirectory=bluetooth +ConfigurationDirectoryMode=0555 # Execute Mappings MemoryDenyWriteExecute=true -- 2.47.3