diff options
| author | Alex Xu (Hello71) <alex_y_xu@yahoo.ca> | 2021-10-03 15:03:42 -0400 |
|---|---|---|
| committer | Alex Xu (Hello71) <alex_y_xu@yahoo.ca> | 2021-10-03 15:03:42 -0400 |
| commit | 7dccf6e8684f767b6e377d627b36ccf493947f1e (patch) | |
| tree | 4859d4e1a24ea2028de1366bc59cd28e6782a6d1 /analytics/analytics.service | |
| download | alxu.ca-7dccf6e8684f767b6e377d627b36ccf493947f1e.tar.xz alxu.ca-7dccf6e8684f767b6e377d627b36ccf493947f1e.zip | |
Initial commit
Diffstat (limited to 'analytics/analytics.service')
| -rw-r--r-- | analytics/analytics.service | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/analytics/analytics.service b/analytics/analytics.service new file mode 100644 index 0000000..461a940 --- /dev/null +++ b/analytics/analytics.service @@ -0,0 +1,28 @@ +[Unit] +Description=analytics server + +[Service] +Type=simple +ExecStart=/usr/sbin/analytics + +LockPersonality=yes +MemoryDenyWriteExecute=yes +NoNewPrivileges=yes +CapabilityBoundingSet= +PrivateDevices=yes +PrivateNetwork=yes +PrivateTmp=yes +ProtectClock=yes +ProtectControlGroups=yes +ProtectHome=yes +ProtectHostname=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectKernelLogs=yes +ProtectSystem=strict +RestrictAddressFamilies=AF_UNIX +RestrictNamespaces=yes +RestrictRealtime=yes +RestrictSUIDSGID=yes +SystemCallArchitectures=native +SystemCallFilter=@system-service |