git clone https://hacktivis.me/git/pleroma.git
no_new_privs.add (57B)
(hardening) Add no_new_privs=yes to OpenRC service files