17 lines
316 B
INI
17 lines
316 B
INI
|
[Unit]
|
||
|
Description=Initialization of pyruse module %I
|
||
|
|
||
|
[Service]
|
||
|
Type=oneshot
|
||
|
ExecStart=/usr/bin/pyruse-boot "%I"
|
||
|
CapabilityBoundingSet=CAP_SYS_CHROOT
|
||
|
NoNewPrivileges=true
|
||
|
PrivateDevices=yes
|
||
|
PrivateTmp=yes
|
||
|
ProtectHome=yes
|
||
|
ProtectSystem=full
|
||
|
ReadWriteDirectories=/var/lib/pyruse
|
||
|
|
||
|
[Install]
|
||
|
WantedBy=multi-user.target
|