Hi Leo, Leo Famulari skribis: > From 1817aec86076307f7b85cdc27b9ead572d0575e7 Mon Sep 17 00:00:00 2001 > From: Leo Famulari > Date: Tue, 16 Mar 2021 21:36:36 -0400 > Subject: [PATCH] system: Harden filesystem links. > > References: > > https://sysctl-explorer.net/fs/protected_hardlinks/ > https://sysctl-explorer.net/fs/protected_symlinks/ > > * gnu/services/sysctl.scm (%default-sysctl-settings): New public variable. > (): Use %default-sysctl-settings as the default value. > * gnu/services/base.scm (%base-services): Add sysctl-service-type. > * doc/guix.texi (Miscellaneous Services): Document the new defaults. Looks perfect to me, thank you! Ludo’.