summaryrefslogtreecommitdiff
path: root/random-seed-save.service.in
blob: e70192b848355bee73844b4f9a89dde41cb07aa5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
[Unit]
Description=Random seed save
RequiresMountsFor=@default_seed_path_dir@
After=systemd-remount-fs.service

[Service]
ExecStart=@sbindir@/random-seed save
CapabilityBoundingSet=
NoNewPrivileges=yes
PrivateDevices=yes
PrivateNetwork=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
LockPersonality=yes
TemporaryFileSystem=/:ro
BindPaths=@default_seed_path_dir@