Sandbox a Service

systemd · easy · solved in-browser (no VM needed) · 3 tiered hints

Write /etc/systemd/system/myd.service. It only needs a [Service] section that runs ExecStart=/usr/bin/myd and applies four sandboxing directives: ProtectSystem=strict, ProtectHome=true, PrivateTmp=true, and NoNewPrivileges=yes. (Authored config, graded structurally — the engine isn't run here.)

▶ Start this challenge

Nobody has solved this one yet — be the first clear on the leaderboard.

How it works

Open the challenge and an in-page editor appears — write your answer and tmpfs.tech grades it server-side against the same checks a real box would run. No VM, no install, no signup needed to try.

More systemd challenges

Units, services, ordering and dependencies — enable, start, repair and verify.

Cap Journal Disk Useeasy · in-browser
Enable and start a serviceeasy
Inspect the default targeteasy
Laptop Lid & Idle Policyeasy · in-browser
Resource-Limit Drop-Ineasy · in-browser
tmpfiles.d Runtime Direasy · in-browser
Auto-restart a servicemedium
Boot + Interval Timermedium · in-browser

See all systemd challenges →

FAQ

Is it free? Yes — play as a guest, no signup required to start.

Do I need to install anything? No. Everything runs in your browser.

How is it graded? Automatically and deterministically — your work is checked against the exact rules the live box would apply.