summaryrefslogtreecommitdiff
path: root/systemd/random-seed-save.service.in
diff options
context:
space:
mode:
Diffstat (limited to 'systemd/random-seed-save.service.in')
-rw-r--r--systemd/random-seed-save.service.in16
1 files changed, 16 insertions, 0 deletions
diff --git a/systemd/random-seed-save.service.in b/systemd/random-seed-save.service.in
new file mode 100644
index 0000000..e70192b
--- /dev/null
+++ b/systemd/random-seed-save.service.in
@@ -0,0 +1,16 @@
+[Unit]
+Description=Random seed save
+RequiresMountsFor=@default_seed_path_dir@
+After=systemd-remount-fs.service
+
+[Service]
+ExecStart=@sbindir@/random-seed save
+CapabilityBoundingSet=
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateNetwork=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+LockPersonality=yes
+TemporaryFileSystem=/:ro
+BindPaths=@default_seed_path_dir@