{"id":"c102d2a8-d3fd-42f2-bb82-48a09e3c85c7","kind":"sos","name":"Yes, even you can harden your systemd services!","slug":"yes-even-you-can-harden-your-systemd-services","url":"https://api.events.ccc.de/congress/2025/event/c102d2a8-d3fd-42f2-bb82-48a09e3c85c7/?format=json","track":null,"assembly":"sos","room":"d477e5d4-4700-4317-896c-ca39c0720eed","location":null,"language":"en","description":"systemd offers lots of low-effort features for hardening services, but they're only slowly gaining adoption even though they are relatively simple to use. I'd like to introduce the essential options for hardening a systemd service, taking into account some interesting possibilities that arise when at least parts of the system are completely immutable, such as on NixOS.","schedule_start":"2025-12-28T17:00:00+01:00","schedule_duration":"00:50:00","schedule_end":"2025-12-28T17:50:00+01:00"}