From 7dccf6e8684f767b6e377d627b36ccf493947f1e Mon Sep 17 00:00:00 2001
From: "Alex Xu (Hello71)" <alex_y_xu@yahoo.ca>
Date: Sun, 3 Oct 2021 15:03:42 -0400
Subject: Initial commit

---
 analytics/analytics.service | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 analytics/analytics.service

(limited to 'analytics/analytics.service')

diff --git a/analytics/analytics.service b/analytics/analytics.service
new file mode 100644
index 0000000..461a940
--- /dev/null
+++ b/analytics/analytics.service
@@ -0,0 +1,28 @@
+[Unit]
+Description=analytics server
+
+[Service]
+Type=simple
+ExecStart=/usr/sbin/analytics
+
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+CapabilityBoundingSet=
+PrivateDevices=yes
+PrivateNetwork=yes
+PrivateTmp=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectHostname=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectKernelLogs=yes
+ProtectSystem=strict
+RestrictAddressFamilies=AF_UNIX
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
-- 
cgit v1.2.3-70-g09d2