summaryrefslogtreecommitdiff
path: root/systemd
diff options
context:
space:
mode:
Diffstat (limited to 'systemd')
-rw-r--r--systemd/random-seed-save.service.in18
-rw-r--r--systemd/random-seed.service.in18
2 files changed, 18 insertions, 18 deletions
diff --git a/systemd/random-seed-save.service.in b/systemd/random-seed-save.service.in
index 2785b00..594d28f 100644
--- a/systemd/random-seed-save.service.in
+++ b/systemd/random-seed-save.service.in
@@ -5,12 +5,12 @@ After=systemd-remount-fs.service
[Service]
ExecStart=@sbindir@/random-seed save
-CapabilityBoundingSet=
-NoNewPrivileges=yes
-PrivateDevices=yes
-PrivateNetwork=yes
-ProtectKernelTunables=yes
-ProtectKernelModules=yes
-LockPersonality=yes
-TemporaryFileSystem=/:ro
-BindPaths=@default_seed_dir@
+#CapabilityBoundingSet=
+#NoNewPrivileges=yes
+#PrivateDevices=yes
+#PrivateNetwork=yes
+#ProtectKernelTunables=yes
+#ProtectKernelModules=yes
+#LockPersonality=yes
+#TemporaryFileSystem=/:ro
+#BindPaths=@default_seed_dir@
diff --git a/systemd/random-seed.service.in b/systemd/random-seed.service.in
index 1d88698..3134d47 100644
--- a/systemd/random-seed.service.in
+++ b/systemd/random-seed.service.in
@@ -13,15 +13,15 @@ Type=oneshot
RemainAfterExit=yes
ExecStart=@sbindir@/random-seed load
ExecStop=@sbindir@/random-seed save
-CapabilityBoundingSet=CAP_SYS_ADMIN
-NoNewPrivileges=yes
-PrivateDevices=yes
-PrivateNetwork=yes
-ProtectKernelTunables=yes
-ProtectKernelModules=yes
-LockPersonality=yes
-TemporaryFileSystem=/:ro
-BindPaths=@default_seed_dir@
+#CapabilityBoundingSet=CAP_SYS_ADMIN
+#NoNewPrivileges=yes
+#PrivateDevices=yes
+#PrivateNetwork=yes
+#ProtectKernelTunables=yes
+#ProtectKernelModules=yes
+#LockPersonality=yes
+#TemporaryFileSystem=/:ro
+#BindPaths=@default_seed_dir@
TimeoutSec=30s
[Install]