Bug#820808: haveged should start with DevicePolicy=closed

Control: fixed -1 1.9.1-2 Control: fixed -1 1.9.1-3 Control: close -1 1.9.1-2 thanks Nevermind, this is implicit when PrivateDevices is set. Cf systemd.exec(5) signature.asc Description: PGP signature

Bug#820808: haveged should start with DevicePolicy=closed

Package: haveged Version: 1.9.1-3 Severity: wishlist Hi Lunar, I think the unit file for haveged should include DevicePolicy=closed, reducing the impact of it having CAP_SYS_ADMIN. I tested that here, and it works fine. What do you think? Best, nicoo -- System Information: Debian Relea