systemd sandboxing for online

[Martin Milata]

Hello,
as part of the effort to package LOOL for NixOS, I've been trying to use the systemd sandboxing options[1] with loolwsd. They are a simple way of isolating the daemon from the rest of the system.

I don't have a non-NixOS setup to test these and don't want to create untested gerrit change. Would anyone be interested in testing the attached patch and submitting it if it works?

Cheers,
Martin

[1] https://www.freedesktop.org/software/systemd/man/systemd.exec.html#Sandboxing
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lool-systemd-sandboxing.patch
Type: text/x-patch
Size: 740 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/libreoffice/attachments/20200205/67b092be/attachment.bin>