| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061 |
- [Unit]
- Documentation=man:systemd-sysv-generator(8)
- SourcePath=/etc/init.d/babeld
- Description=LSB: Initscript for babeld
- Before=multi-user.target
- Before=graphical.target
- After=remote-fs.target
- [Service]
- LimitNOFILE=1048576
- LimitNPROC=512
- RestrictNamespaces=no
- PrivateDevices=yes
- rivateNetwork=no
- PrivateUsers=no
- ProtectClock=yes
- ProtectControlGroups=yes
- ProtectHome=yes
- ProtectKernelLogs=yes
- ProtectKernelModules=yes
- ProtectKernelTunables=no
- ProtectProc=invisible
- ProtectHostname=yes
- SystemCallArchitectures=native
- SystemCallFilter=~@clock
- SystemCallFilter=~@debug
- SystemCallFilter=~@module
- SystemCallFilter=~@mount
- SystemCallFilter=~@raw-io
- SystemCallFilter=~@reboot
- SystemCallFilter=~@swap
- SystemCallFilter=~@privileged
- SystemCallFilter=~@resources
- SystemCallFilter=~@cpu-emulation
- SystemCallFilter=~@obsolete
- RestrictRealtime=yes
- LockPersonality=yes
- MemoryDenyWriteExecute=yes
- UMask=0077
- RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK
- Type=forking
- Restart=on-failure
- TimeoutSec=5min
- IgnoreSIGPIPE=no
- KillMode=process
- GuessMainPID=no
- SuccessExitStatus= 5 6
- ExecStart=/etc/init.d/babeld start
- ExecStop=/etc/init.d/babeld stop
- [Install]
- WantedBy=multi-user.target
|
