blob: e70192b848355bee73844b4f9a89dde41cb07aa5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
[Unit]
Description=Random seed save
RequiresMountsFor=@default_seed_path_dir@
After=systemd-remount-fs.service
[Service]
ExecStart=@sbindir@/random-seed save
CapabilityBoundingSet=
NoNewPrivileges=yes
PrivateDevices=yes
PrivateNetwork=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
LockPersonality=yes
TemporaryFileSystem=/:ro
BindPaths=@default_seed_path_dir@
|
