You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
22 lines
416 B
22 lines
416 B
[Unit]
|
|
Description=Executable Guardian for %I
|
|
After=network.target
|
|
StartLimitIntervalSec=60
|
|
StartLimitBurst=3
|
|
|
|
[Service]
|
|
ExecStart=/usr/local/bin/execguard --%I
|
|
Restart=on-failure
|
|
RestartSec=2
|
|
SuccessExitStatus=0 4
|
|
RestartForceExitStatus=0 4
|
|
|
|
# Hardening
|
|
MemoryDenyWriteExecute=true
|
|
NoNewPrivileges=true
|
|
SystemCallArchitectures=native
|
|
RestrictSUIDSGID=yes
|
|
RestrictRealtime=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|