blob: 2785b00ac4f7901da87b587f2f49ac6d50f4b3f2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
[Unit]
Description=Random seed save
RequiresMountsFor=@default_seed_dir@
After=systemd-remount-fs.service
[Service]
ExecStart=@sbindir@/random-seed save
CapabilityBoundingSet=
NoNewPrivileges=yes
PrivateDevices=yes
PrivateNetwork=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
LockPersonality=yes
TemporaryFileSystem=/:ro
BindPaths=@default_seed_dir@
|
