sikkienl/dash
1
0
Fork 0
mirror of https://github.com/dashpay/dash.git synced 2024-12-25 20:12:57 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
23f25a94fa
dash/contrib/init
History
Ryan Ofsky c4a147cfea
Merge bitcoin/bitcoin#28340: security: restrict abis in bitcoind.service 
0244416aacbad03e4ebe8f2c95c7861a318916ea security: restrict abis in bitcoind.service (Charlie)

Pull request description:

  [As noted here](https://www.freedesktop.org/software/systemd/man/systemd.exec.html#MemoryDenyWriteExecute=), it's a good idea to pair `MemoryDenyWriteExecute=true` with `SystemCallArchitectures=native` because `MemoryDenyWriteExecute` can be circumvented in some operating systems which support multiple ABIs like x86/x86-64.
  This helps restrict the possible application binary interfaces (ABIs) that can be used when running bitcoind through systemd, reducing the attack surface area.

ACKs for top commit:
  laanwj:
    ACK 0244416aacbad03e4ebe8f2c95c7861a318916ea . This is a sensible security feature.
  0xB10C:
    ACK 0244416aacbad03e4ebe8f2c95c7861a318916ea

Tree-SHA512: 77a35b0674d8d67d857cd20ae1b8cd011f82d6f5ed21bc106cbe45bfa937e786ddc1bf7261e3bdb8c289df1224e91658760905d2c8f37cc4c6506ef8037ad158
2024-10-26 12:29:51 -05:00
..
dashd.conf Merge #16569: Increase init file stop timeout 2022-04-02 16:30:52 +05:30
dashd.init Merge #16569: Increase init file stop timeout 2022-04-02 16:30:52 +05:30
dashd.openrc Merge #21111: Improve OpenRC initscript 2021-07-16 10:04:09 -05:00
dashd.openrcconf
dashd.service Merge bitcoin/bitcoin#28340: security: restrict abis in bitcoind.service 2024-10-26 12:29:51 -05:00
org.dash.dashd.plist
README.md Merge #20884: script: Improve robustness of bitcoind.service on startup 2024-01-16 09:29:46 -06:00

README.md

Sample configuration files for:

systemd: dashd.service
Upstart: dashd.conf
OpenRC:  dashd.openrc
         dashd.openrcconf
CentOS:  dashd.init
macOS:   org.dash.dashd.plist

have been made available to assist packagers in creating node packages here.

See doc/init.md for more information.