http://secure45nbquibuw6thmenrfamhobdkkrllgxrtayn4sgmnexremexyd.onion/guides/linux-hardening.html
It is recommended
to apply this and make it execute on boot with an init script. For example, this
is a systemd
service to do so . For basic functionality to work on systems using systemd, you must whitelist a few system services. This can be done by creating /etc/systemd/system/
[email protected]/sysfs.conf and adding: [
Service]
SupplementaryGroups=sysfs This will not fix everything though.