From 1477340317c44eeb98bdf8a659a1ec544c8421e8 Mon Sep 17 00:00:00 2001
From: Tom Ryder <tom@sanctum.geek.nz>
Date: Wed, 24 Jun 2020 01:14:31 +1200
Subject: Add IP address hardening to Newsboat service

---
 newsboat/systemd/user/reload-newsboat.service | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/newsboat/systemd/user/reload-newsboat.service b/newsboat/systemd/user/reload-newsboat.service
index 24cda424..b280c9e1 100644
--- a/newsboat/systemd/user/reload-newsboat.service
+++ b/newsboat/systemd/user/reload-newsboat.service
@@ -9,6 +9,8 @@ LogsDirectory=newsboat
 LogsDirectoryMode=0700
 ExecStart=newsboat --execute=reload --log-file=%L/newsboat/%p.log --log-level=6
 # Hardening
+IPAddressDeny=any
+IPAddressAllow=localhost
 KeyringMode=private
 LockPersonality=true
 MemoryDenyWriteExecute=true
-- 
cgit v1.2.3