/mandos/trunk

« back to all changes in this revision

Viewing changes to mandos.service

• browse files at revision 873
• compare with another revision
• download diff
• download tarball
• view history from revision 873

• reverse the comparison (873 to 805)
• stop comparing with revision 805

Show diffs side-by-side

added

removed

mandos.service

21

21

## bind() on the socket, and also won't announce the ZeroConf service.

22

22

#ExecStart=/usr/sbin/mandos --foreground --socket=0

23

23

#StandardInput=socket

 

24

# Restrict what the Mandos daemon can do.  Note that this also affects

 

25

# "checker" programs!

 

26

PrivateTmp=yes

 

27

PrivateDevices=yes

 

28

ProtectSystem=full

 

29

ProtectHome=yes

 

30

CapabilityBoundingSet=CAP_KILL CAP_SETGID CAP_SETUID CAP_DAC_OVERRIDE CAP_NET_RAW

24

31

 

25

32

[Install]

26

33

WantedBy=multi-user.target

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0