diff options
Diffstat (limited to 'meta/recipes-support/rng-tools/rng-tools/rngd.service')
| -rw-r--r-- | meta/recipes-support/rng-tools/rng-tools/rngd.service | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/meta/recipes-support/rng-tools/rng-tools/rngd.service b/meta/recipes-support/rng-tools/rng-tools/rngd.service index 084322ac40..0559b97991 100644 --- a/meta/recipes-support/rng-tools/rng-tools/rngd.service +++ b/meta/recipes-support/rng-tools/rng-tools/rngd.service | |||
| @@ -8,6 +8,25 @@ Conflicts=shutdown.target | |||
| 8 | [Service] | 8 | [Service] |
| 9 | EnvironmentFile=-@SYSCONFDIR@/default/rng-tools | 9 | EnvironmentFile=-@SYSCONFDIR@/default/rng-tools |
| 10 | ExecStart=@SBINDIR@/rngd -f $EXTRA_ARGS | 10 | ExecStart=@SBINDIR@/rngd -f $EXTRA_ARGS |
| 11 | CapabilityBoundingSet=CAP_SYS_ADMIN | ||
| 12 | IPAddressDeny=any | ||
| 13 | LockPersonality=yes | ||
| 14 | MemoryDenyWriteExecute=yes | ||
| 15 | NoNewPrivileges=yes | ||
| 16 | PrivateTmp=yes | ||
| 17 | ProtectControlGroups=yes | ||
| 18 | ProtectHome=yes | ||
| 19 | ProtectHostname=yes | ||
| 20 | ProtectKernelModules=yes | ||
| 21 | ProtectKernelLogs=yes | ||
| 22 | ProtectSystem=strict | ||
| 23 | RestrictAddressFamilies=AF_UNIX | ||
| 24 | RestrictNamespaces=yes | ||
| 25 | RestrictRealtime=yes | ||
| 26 | RestrictSUIDSGID=yes | ||
| 27 | SystemCallArchitectures=native | ||
| 28 | SystemCallErrorNumber=EPERM | ||
| 29 | SystemCallFilter=@system-service | ||
| 11 | 30 | ||
| 12 | [Install] | 31 | [Install] |
| 13 | WantedBy=sysinit.target | 32 | WantedBy=sysinit.target |