security-misc
security-misc copied to clipboard
Protecting /sys and /proc
We know have our own services to change permissions. I have come across a better and more clean implementation.
https://github.com/divestedcg/Brace/tree/master/brace/usr/lib/tmpfiles.d
Can this approach be used here too for our purposes?