diff --git a/install-systemd-service.sh b/install-systemd-service.sh index f590bbb..d64cbce 100755 --- a/install-systemd-service.sh +++ b/install-systemd-service.sh @@ -73,13 +73,6 @@ StandardOutput=journal StandardError=journal SyslogIdentifier=telegram-bot -# Security hardening с исключениями для работы бота -NoNewPrivileges=true -ProtectSystem=strict -ProtectHome=read-only -PrivateTmp=true -ReadWritePaths=$BOT_DIR $NVM_DIR /home/$BOT_USER/.cache - [Install] WantedBy=multi-user.target EOF diff --git a/telegram-bot.service b/telegram-bot.service index 4226aaa..a030eaa 100644 --- a/telegram-bot.service +++ b/telegram-bot.service @@ -16,12 +16,5 @@ StandardOutput=journal StandardError=journal SyslogIdentifier=telegram-bot -# Security hardening с исключениями для работы бота -NoNewPrivileges=true -ProtectSystem=strict -ProtectHome=read-only -PrivateTmp=true -ReadWritePaths=%WORKDIR% %HOME%/.npm-global %HOME%/.nvm %HOME%/.config/nvm %HOME%/.cache - [Install] WantedBy=multi-user.target