2017-12-16 20:26:59 +01:00
|
|
|
[Unit]
|
|
|
|
|
Description=Route systemd-journal logs to filters and actions (ban, report…)
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
ExecStart=/usr/bin/pyruse
|
2018-01-31 13:01:45 +01:00
|
|
|
WorkingDirectory=/etc/pyruse
|
2018-02-05 08:30:09 +01:00
|
|
|
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT
|
2017-12-16 20:26:59 +01:00
|
|
|
NoNewPrivileges=true
|
|
|
|
|
PrivateDevices=yes
|
|
|
|
|
PrivateTmp=yes
|
|
|
|
|
ProtectHome=yes
|
|
|
|
|
ProtectSystem=full
|
|
|
|
|
ReadWriteDirectories=/var/lib/pyruse
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
