blob: 4055a752f933ff9a7d5610850aa1797940de3ff5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
[Unit]
Description=DCC (Distributed Checksum Clearinghouses) interface daemon
[Service]
Type=forking
PermissionsStartOnly=true
RuntimeDirectory=dcc
ConfigurationDirectory=dcc
LogsDirectory=dcc
StateDirectory=dcc
ExecStart=/usr/sbin/dccifd
#DCC writes pid file with "-" at the beginning which confuses systemd
#PIDFile=/run/dcc/dccifd.pid
# Hardening
ProtectSystem=strict
PrivateDevices=true
ProtectKernelModules=true
ProtectKernelLogs=true
RestrictRealtime=true
ProtectKernelTunables=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true
ProtectClock=true
PrivateTmp=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true
[Install]
WantedBy=multi-user.target
|
