{"guid":"e68d6a44-756e-52b6-ba48-d296f26e1a21","title":"Yes, even you can harden your systemd services!","subtitle":null,"slug":"asm26-harden-systemd-services","link":"https://pretalx.c3voc.de/asm26/talk/3GJTTU/","description":"systemd offers lots of low-effort features for hardening services, but they're only slowly gaining adoption even though they are relatively simple to use. I'd like to introduce the essential options for hardening a systemd service, taking into account some interesting possibilities that arise when at least parts of the system are completely immutable, such as on NixOS.\n\n","original_language":"eng","persons":["whoami"],"view_count":94,"promoted":false,"date":"2026-05-23T15:30:00.000+02:00","release_date":"2026-05-25T00:00:00.000+02:00","updated_at":"2026-05-26T21:00:04.841+02:00","tags":["110706","2026","asm","Security","Sprachschule","asm-eng"],"length":3119,"duration":3119,"thumb_url":"https://static.media.ccc.de/media/regional/muenchen/asm/2026/110706-e68d6a44-756e-52b6-ba48-d296f26e1a21.jpg","poster_url":"https://static.media.ccc.de/media/regional/muenchen/asm/2026/110706-e68d6a44-756e-52b6-ba48-d296f26e1a21_preview.jpg","timeline_url":"https://static.media.ccc.de/media/regional/muenchen/asm/2026/110706-e68d6a44-756e-52b6-ba48-d296f26e1a21.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/regional/muenchen/asm/2026/110706-e68d6a44-756e-52b6-ba48-d296f26e1a21.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/asm26-harden-systemd-services","url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_title":"Alternativlose Sicherheits-Maßname","conference_url":"https://api.media.ccc.de/public/conferences/asm","related":[],"recordings":[{"size":113,"length":3119,"mime_type":"video/webm","language":"eng","filename":"import-110706-eng-Yes_even_you_can_harden_your_systemd_services_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-05-25T03:13:28.183+02:00","recording_url":"https://cdn.media.ccc.de/contributors/muenchen/asm/2026/webm-sd/import-110706-eng-Yes_even_you_can_harden_your_systemd_services_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/100770","event_url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_url":"https://api.media.ccc.de/public/conferences/asm"},{"size":242,"length":3119,"mime_type":"video/webm","language":"eng","filename":"import-110706-eng-Yes_even_you_can_harden_your_systemd_services_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-05-25T03:07:35.542+02:00","recording_url":"https://cdn.media.ccc.de/contributors/muenchen/asm/2026/webm-hd/import-110706-eng-Yes_even_you_can_harden_your_systemd_services_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/100769","event_url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_url":"https://api.media.ccc.de/public/conferences/asm"},{"size":84,"length":3119,"mime_type":"video/mp4","language":"eng","filename":"import-110706-eng-Yes_even_you_can_harden_your_systemd_services_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2026-05-25T01:52:03.896+02:00","recording_url":"https://cdn.media.ccc.de/contributors/muenchen/asm/2026/h264-sd/import-110706-eng-Yes_even_you_can_harden_your_systemd_services_sd.mp4","url":"https://api.media.ccc.de/public/recordings/100760","event_url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_url":"https://api.media.ccc.de/public/conferences/asm"},{"size":47,"length":3119,"mime_type":"audio/mpeg","language":"eng","filename":"import-110706-eng-Yes_even_you_can_harden_your_systemd_services_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2026-05-25T01:49:21.777+02:00","recording_url":"https://cdn.media.ccc.de/contributors/muenchen/asm/2026/mp3/import-110706-eng-Yes_even_you_can_harden_your_systemd_services_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/100759","event_url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_url":"https://api.media.ccc.de/public/conferences/asm"},{"size":32,"length":3119,"mime_type":"audio/opus","language":"eng","filename":"import-110706-eng-Yes_even_you_can_harden_your_systemd_services_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2026-05-25T01:48:31.548+02:00","recording_url":"https://cdn.media.ccc.de/contributors/muenchen/asm/2026/opus/import-110706-eng-Yes_even_you_can_harden_your_systemd_services_opus.opus","url":"https://api.media.ccc.de/public/recordings/100758","event_url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_url":"https://api.media.ccc.de/public/conferences/asm"},{"size":188,"length":3119,"mime_type":"video/mp4","language":"eng","filename":"import-110706-eng-Yes_even_you_can_harden_your_systemd_services_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2026-05-25T01:40:53.680+02:00","recording_url":"https://cdn.media.ccc.de/contributors/muenchen/asm/2026/h264-hd/import-110706-eng-Yes_even_you_can_harden_your_systemd_services_hd.mp4","url":"https://api.media.ccc.de/public/recordings/100753","event_url":"https://api.media.ccc.de/public/events/e68d6a44-756e-52b6-ba48-d296f26e1a21","conference_url":"https://api.media.ccc.de/public/conferences/asm"}]}