Update sourceballs.service

Remove unused devlist-mailer and apply some hardening.
archlinux · Jul 3, 2020 · 5e67384 · 5e67384
1 parent 10c40f7
commit 5e67384
Showing 1 changed file with 10 additions and 3 deletions.
diff --git a/roles/dbscripts/files/sourceballs.service b/roles/dbscripts/files/sourceballs.service
@@ -4,6 +4,13 @@ Description=Sourceballs
 [Service]
 Type=oneshot
 User=sourceballs
-ExecStart=/usr/bin/bash -c '/srv/repos/svn-community/dbscripts/cron-jobs/sourceballs 2>&1 | /srv/repos/svn-community/dbscripts/cron-jobs/devlist-mailer "Community Sourceballs" "arch-notifications@archlinux.org"'
-ExecStart=/usr/bin/bash -c '/srv/repos/svn-packages/dbscripts/cron-jobs/sourceballs 2>&1 | /srv/repos/svn-packages/dbscripts/cron-jobs/devlist-mailer "Packages Sourceballs" "arch-notifications@archlinux.org"'
-#ExecStart=/usr/bin/find /home/sourceballs/sources -type f -mtime +7 -delete
+ExecStart=/srv/repos/svn-community/dbscripts/cron-jobs/sourceballs
+ExecStart=/srv/repos/svn-packages/dbscripts/cron-jobs/sourceballs
+
+PrivateDevices=true
+NoNewPrivileges=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+
+ProtectKernelTunables=true
+ProtectControlGroups=true