File 001-harden-systemd-unit.patch of Package below
diff --git a/etc/below.service b/etc/below.service index 0f18e02..c6ed828 100644 --- a/etc/below.service +++ b/etc/below.service @@ -18,6 +18,7 @@ After=time-sync.target [Service] LogsDirectory=below +ProtectSystem=full ExecStart=/usr/bin/below record --retain-for-s 604800 --compress # Enable backtraces in errors Environment=RUST_LIB_BACKTRACE=1