Harden service file: Set the adjustment value for the Linux kernel's Out-Of-Memory (OOM) killer score for executed processes (#563)

Cropi · web-flow · commit 4ecec2266526 · 2022-11-16T08:43:40.000+01:00
diff --git a/usbguard.service.in b/usbguard.service.in
@@ -4,6 +4,7 @@ Wants=systemd-udevd.service local-fs.target
 Documentation=man:usbguard-daemon(8)
 
 [Service]
+OOMScoreAdjust=-1000
 AmbientCapabilities=
 CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_AUDIT_WRITE
 DevicePolicy=closed
