]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-importd.service.in
units: add a basic SystemCallFilter (#3471)
[thirdparty/systemd.git] / units / systemd-importd.service.in
CommitLineData
3d7415f4
LP
1# This file is part of systemd.
2#
3# systemd is free software; you can redistribute it and/or modify it
4# under the terms of the GNU Lesser General Public License as published by
5# the Free Software Foundation; either version 2.1 of the License, or
6# (at your option) any later version.
7
8[Unit]
9Description=Virtual Machine and Container Download Service
10Documentation=man:systemd-importd.service(8)
45bd4854 11Documentation=http://www.freedesktop.org/wiki/Software/systemd/importd
3d7415f4
LP
12
13[Service]
14ExecStart=@rootlibexecdir@/systemd-importd
15BusName=org.freedesktop.import1
15d7b517 16CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE
e57565dd 17NoNewPrivileges=yes
c2fc2c25 18WatchdogSec=3min
658f26b8 19KillMode=mixed
40652ca4 20MemoryDenyWriteExecute=yes
40093ce5 21SystemCallFilter=~@clock @module @mount @obsolete @raw-io ptrace