rpi: усилить изоляцию Маруси и записать повторную проверку

2026-10-11 18:41:06 +03:00
parent aece60da74
commit 587a57a60c
3 changed files with 11 additions and 0 deletions
@@ -19,6 +19,8 @@ UMask=0077
 NoNewPrivileges=yes
 ProtectSystem=strict
 ProtectHome=tmpfs
+InaccessiblePaths=-/mnt/backup -/mnt/router -/etc/router.env -/etc/astra-bot.env -/etc/metrics-push -/etc/server-backup -/etc/astra-marusia.env -/opt/media -/opt/astra-bot
+ProtectProc=invisible
 BindReadOnlyPaths=/home/astra/.codex/auth.json:/var/lib/astra-marusia/auth.json
 PrivateTmp=yes
 ProtectKernelTunables=yes