Who knows...

This commit is contained in:
2023-09-05 16:34:47 +03:00
parent ad93c64862
commit ab40949ce1

4
harden
View File

@@ -7,7 +7,7 @@
# Using set to make the script safer
set -e # Exit on error
set -u # Exit on undefined variable
set -x # Print commands for debugging
# set -x # Print commands for debugging
set -a # Export all variables
set -C # Disable overwriting of files
set -o pipefail # Exit on pipe error
@@ -327,7 +327,7 @@ EOF
sudo runuser - secdep -c 'mkdir -p /home/secdep/.config/docker'
# "icc": false to disable inter-container communication, does not work without br_netfilter module loaded
# and it is sometimes prohibited by the hosting provider
# so we'll leave it out
# so we'll leave it out of the daemon config
DOCKERD_CONFIG=$(cat <<'EOF'
{
"no-new-privileges": true,