Syleron / pulseha

PulseHA is a active-passive high availability cluster daemon that uses GRPC and is written in GO.

Home Page:http://www.pulseha.com/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add RestrictAddressFamilies to pulseha.service to prevent a CVE

akadata opened this issue · comments

[Unit]
Description=PulseHA Daemon

[Service]
User=pulseha
Group=pulseha
Type=forking
ExecStart=/usr/local/sbin/pulse
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX

[Install]
WantedBy=default.target

http://0pointer.net/blog/avoiding-cve-2016-8655-with-systemd.html

Cheers. Worked into dev branch