diff --git a/examples/systemd/system/spire-agent@.service b/examples/systemd/system/spire-agent@.service index b2ada7b..a3cfcef 100644 --- a/examples/systemd/system/spire-agent@.service +++ b/examples/systemd/system/spire-agent@.service @@ -19,7 +19,7 @@ MemoryDenyWriteExecute=true NoNewPrivileges=true PrivateDevices=false # Needed by plugins -PrivateTmp=false +PrivateTmp=true ProtectControlGroups=true ProtectHome=true ProtectHostname=true diff --git a/examples/systemd/system/spire-server@.service b/examples/systemd/system/spire-server@.service index c3942e5..bbb43f8 100644 --- a/examples/systemd/system/spire-server@.service +++ b/examples/systemd/system/spire-server@.service @@ -19,7 +19,7 @@ MemoryDenyWriteExecute=true NoNewPrivileges=true PrivateDevices=false # Needed by plugins -PrivateTmp=false +PrivateTmp=true ProtectControlGroups=true ProtectHome=true ProtectHostname=true