/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos.service

  • Committer: Teddy Hogeborn
  • Date: 2024-09-22 17:38:57 UTC
  • Revision ID: teddy@recompile.se-20240922173857-rfhxneq4207tx9o0
Only use D-Bus when necessary

If *both* "use_dbus" and "zeroconf" are false, by either setting them
to False in mandos.conf or by using the --no-dbus and --no-zeroconf
options (and a port number or socket is specified), then we do not
need to connect to D-Bus at all.

From: Mike Klein <mike@kleinnet.com>
Signed-off-by: Teddy Hogeborn <teddy@recompile.se>

Show diffs side-by-side

added added

removed removed

Lines of Context:
mandos.service
14
14
## If the server's D-Bus interface is disabled, the "BusName" setting
15
15
## should be removed or commented out.
16
16
BusName=se.recompile.Mandos
17
 
ExecStart=/usr/sbin/mandos --foreground
 
17
EnvironmentFile=/etc/default/mandos
 
18
ExecStart=/usr/sbin/mandos --foreground $DAEMON_ARGS
18
19
Restart=always
19
20
KillMode=mixed
20
21
## Using socket activation won't work, because systemd always does
28
29
ProtectSystem=full
29
30
ProtectHome=yes
30
31
CapabilityBoundingSet=CAP_KILL CAP_SETGID CAP_SETUID CAP_DAC_OVERRIDE CAP_NET_RAW
 
32
ProtectKernelTunables=yes
 
33
ProtectControlGroups=yes
31
34
 
32
35
[Install]
33
36
WantedBy=multi-user.target