diff --git a/templates/usr/local/lib/systemd/system/rosetta_maintenance_begin.service.j2 b/templates/usr/local/lib/systemd/system/rosetta_maintenance_begin.service.j2 index 77d68c7d3612bac72657be013969ea5d53d8921f..bd83ab4fb7a238e57de5ce9e79f3c6437751b115 100644 --- a/templates/usr/local/lib/systemd/system/rosetta_maintenance_begin.service.j2 +++ b/templates/usr/local/lib/systemd/system/rosetta_maintenance_begin.service.j2 @@ -13,7 +13,7 @@ Group={{ vault_rosetta_group }} ### Security features # documented at https://www.freedesktop.org/software/systemd/man/systemd.exec.html # or at `man (5) systemd.exec` -ProtectSystem=strict +ProtectSystem=full ProtectHome=read-only #ProtectHostname=true #ProtectClock=true