diff --git a/arch/tuwunel.service b/arch/tuwunel.service index 334256fc..42f36ad3 100644 --- a/arch/tuwunel.service +++ b/arch/tuwunel.service @@ -25,6 +25,8 @@ TTYRows=40 AmbientCapabilities= CapabilityBoundingSet= +ManagedOOMPreference=avoid + DevicePolicy=closed LockPersonality=yes MemoryDenyWriteExecute=yes diff --git a/debian/tuwunel.service b/debian/tuwunel.service index bb2a3e63..bfd0c80e 100644 --- a/debian/tuwunel.service +++ b/debian/tuwunel.service @@ -18,6 +18,8 @@ ReadWritePaths=/var/lib/tuwunel /etc/tuwunel AmbientCapabilities= CapabilityBoundingSet= +ManagedOOMPreference=avoid + DevicePolicy=closed LockPersonality=yes MemoryDenyWriteExecute=yes diff --git a/rpm/tuwunel.service b/rpm/tuwunel.service index b37d202e..606ee39d 100644 --- a/rpm/tuwunel.service +++ b/rpm/tuwunel.service @@ -18,6 +18,8 @@ ReadWritePaths=/var/lib/tuwunel /etc/tuwunel AmbientCapabilities= CapabilityBoundingSet= +ManagedOOMPreference=avoid + DevicePolicy=closed LockPersonality=yes MemoryDenyWriteExecute=yes