Details
-
Improvement
-
Status: Backlog
-
Minor - P4
-
Resolution: Unresolved
-
None
-
None
Description
It's recommended to use stricter systemd .service settings when possible, to reduce the potential impact of a vulnerability. Using `ProtectSystem`, `ProtectHome` and removing the `CAP_SYS_PTRACE` capability is .service configuration changes that shouldn't impact the functionality or perfomance of a MongoDB server.