diff options
| author | Alex Xu (Hello71) <alex_y_xu@yahoo.ca> | 2018-08-08 23:13:59 -0400 |
|---|---|---|
| committer | Alex Xu (Hello71) <alex_y_xu@yahoo.ca> | 2018-08-08 23:13:59 -0400 |
| commit | a259e71858ba80af89b192a34275fb0048f30ef1 (patch) | |
| tree | cf7ec6c02060567175ff16fdccb7328ac5a5f9eb /random-seed-save.service | |
| parent | 75b4f9e76ed827bbe10a12f87eb34c744bf829b4 (diff) | |
| download | random-seed-a259e71858ba80af89b192a34275fb0048f30ef1.tar.xz random-seed-a259e71858ba80af89b192a34275fb0048f30ef1.zip | |
Add systemd units, DESTDIR support
Diffstat (limited to 'random-seed-save.service')
| -rw-r--r-- | random-seed-save.service | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/random-seed-save.service b/random-seed-save.service new file mode 100644 index 0000000..a9858bc --- /dev/null +++ b/random-seed-save.service @@ -0,0 +1,16 @@ +[Unit] +Description=Random seed save +RequiresMountsFor=@default_seed_path_dir@ +After=systemd-remount-fs.service + +[Service] +ExecStart=@sbindir@/random-seed save +CapabilityBoundingSet=CAP_SYS_ADMIN +NoNewPrivileges=yes +PrivateDevices=yes +PrivateNetwork=yes +ProtectKernelTunables=yes +ProtectKernelModules=yes +LockPersonality=yes +TemporaryFileSystem=/:ro +BindPaths=@default_seed_path_dir@ |