From a259e71858ba80af89b192a34275fb0048f30ef1 Mon Sep 17 00:00:00 2001
From: "Alex Xu (Hello71)" <alex_y_xu@yahoo.ca>
Date: Wed, 8 Aug 2018 23:13:59 -0400
Subject: Add systemd units, DESTDIR support

---
 random-seed-save.service | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 random-seed-save.service

(limited to 'random-seed-save.service')

diff --git a/random-seed-save.service b/random-seed-save.service
new file mode 100644
index 0000000..a9858bc
--- /dev/null
+++ b/random-seed-save.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=Random seed save
+RequiresMountsFor=@default_seed_path_dir@
+After=systemd-remount-fs.service
+
+[Service]
+ExecStart=@sbindir@/random-seed save
+CapabilityBoundingSet=CAP_SYS_ADMIN
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateNetwork=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+LockPersonality=yes
+TemporaryFileSystem=/:ro
+BindPaths=@default_seed_path_dir@
-- 
cgit v1.2.3-70-g09d2