Merge branch 'PR/libmount-utab-event' of github.com:karelzak/util-linux-work

[thirdparty/util-linux.git] / misc-utils / uuidd.service.in

diff --git a/misc-utils/uuidd.service.in b/misc-utils/uuidd.service.in
index 53167276529279dbe800c02380cdd14b9d351d71..330f1ab9b233f7297807d8bcbfb5e1723003762b 100644 (file)
--- a/misc-utils/uuidd.service.in
+++ b/misc-utils/uuidd.service.in
@@ -1,12 +1,23 @@
 [Unit]
 Description=Daemon for generating UUIDs
+Documentation=man:uuidd(8)
 Requires=uuidd.socket
 
 [Service]
-ExecStart=@usrsbin_execdir@/uuidd --socket-activation
+ExecStart=@usrsbin_execdir@/uuidd --socket-activation --cont-clock
 Restart=no
 User=uuidd
 Group=uuidd
+ProtectSystem=strict
+ProtectHome=yes
+PrivateDevices=yes
+PrivateUsers=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+MemoryDenyWriteExecute=yes
+ReadWritePaths=/var/lib/libuuid/
+SystemCallFilter=@default @file-system @basic-io @system-service @signal @io-event @network-io
 
 [Install]
 Also=uuidd.socket