blob: a9858bc304e07d0e230ac09162069f2f01af00b2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
[Unit]
Description=Random seed save
RequiresMountsFor=@default_seed_path_dir@
After=systemd-remount-fs.service
[Service]
ExecStart=@sbindir@/random-seed save
CapabilityBoundingSet=CAP_SYS_ADMIN
NoNewPrivileges=yes
PrivateDevices=yes
PrivateNetwork=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
LockPersonality=yes
TemporaryFileSystem=/:ro
BindPaths=@default_seed_path_dir@
|
