Added protection things

This commit is contained in:
Eduard Tolosa 2019-02-23 18:55:22 -05:00
parent 3aca7c0eac
commit 5165d62538

View file

@ -3,11 +3,14 @@
After=network-online.target
[Service]
Type=oneshot
ExecStart=/usr/bin/rnetworking
TimeoutStopSec=180
KillMode=process
KillSignal=SIGINT
Type=oneshot
ProtectHome=true
ProtectSystem=strict
ExecStart=/usr/bin/rnetworking
CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE LimitNPROC=10
DeviceAllow=/dev/null rw
DeviceAllow=/dev/net/tun rw
KillMode=process
[Install]
WantedBy=multi-user.target