/mandos/release

« back to all changes in this revision

Viewing changes to mandos.service

• browse files at revision 237.7.336
• compare with another revision
• download diff
• download tarball
• view history from revision 237.7.336

• reverse the comparison (237.7.336 to 237.7.377)
• stop comparing with revision 237.7.377

Show diffs side-by-side

added

removed

mandos.service

21

21

## bind() on the socket, and also won't announce the ZeroConf service.

22

22

#ExecStart=/usr/sbin/mandos --foreground --socket=0

23

23

#StandardInput=socket

24

 

# Restrict what the Mandos daemon can do.  Note that this also affects

25

 

# "checker" programs!

26

 

PrivateTmp=yes

27

 

PrivateDevices=yes

28

 

ProtectSystem=full

29

 

ProtectHome=yes

30

 

CapabilityBoundingSet=CAP_KILL CAP_SETGID CAP_SETUID CAP_DAC_OVERRIDE CAP_NET_RAW

31

 

# Bug workaround; the daemon does not stop on SIGTERM until poked via

32

 

# D-Bus; cause is unknown at this time

33

 

ExecStop=/bin/kill -TERM $MAINPID ; /usr/sbin/mandos-ctl >/dev/null 2>&1

34

24

 

35

25

[Install]

36

26

WantedBy=multi-user.target

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0