From fd1f801808d03e1c6fbfc2c24b13fcf23eac8752 Mon Sep 17 00:00:00 2001 From: Yves G Date: Wed, 31 Jan 2018 13:01:45 +0100 Subject: [PATCH] set PWD to /etc/pyruse in systemd units --- extra/systemd/pyruse-boot@.service | 1 + extra/systemd/pyruse.service | 1 + 2 files changed, 2 insertions(+) diff --git a/extra/systemd/pyruse-boot@.service b/extra/systemd/pyruse-boot@.service index 178429d..e415655 100644 --- a/extra/systemd/pyruse-boot@.service +++ b/extra/systemd/pyruse-boot@.service @@ -4,6 +4,7 @@ Description=Initialization of pyruse module %I [Service] Type=oneshot ExecStart=/usr/bin/pyruse-boot "%I" +WorkingDirectory=/etc/pyruse CapabilityBoundingSet=CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes diff --git a/extra/systemd/pyruse.service b/extra/systemd/pyruse.service index d15e3cd..1ee57d7 100644 --- a/extra/systemd/pyruse.service +++ b/extra/systemd/pyruse.service @@ -3,6 +3,7 @@ Description=Route systemd-journal logs to filters and actions (ban, report…) [Service] ExecStart=/usr/bin/pyruse +WorkingDirectory=/etc/pyruse CapabilityBoundingSet=CAP_SYS_CHROOT NoNewPrivileges=true PrivateDevices=yes