A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
ageis
/ systemd_service_hardening.md
Last active
September 5, 2024 09:52
Options for hardening systemd service units
Equivalent of firefox -P PROFILE_NAME -no-remote but with the remote enabled.
Multifirefox is a way to have multiple firefox profiles and open links in them. There are multiple ways of invocation:
multifirefox PROFILE_NAME ...
Start Firefox with the profile PROFILE_NAME (or open a new window in the existing firefox instance).