diff options
Diffstat (limited to 'net-misc/radvd')
| -rw-r--r-- | net-misc/radvd/files/radvd.service | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/net-misc/radvd/files/radvd.service b/net-misc/radvd/files/radvd.service index d9095f625a9c..a3ac66f84963 100644 --- a/net-misc/radvd/files/radvd.service +++ b/net-misc/radvd/files/radvd.service @@ -4,12 +4,23 @@ Documentation=man:radvd(8) After=network.target [Service] +User=radvd +Group=radvd Type=forking -ExecStart=/usr/sbin/radvd --username radvd --logmethod stderr --debug 0 +ExecStartPre=/usr/sbin/radvd --configtest +ExecStart=/usr/sbin/radvd --logmethod stderr --debug 0 ExecReload=/usr/sbin/radvd --configtest ; \ /bin/kill -HUP $MAINPID CPUSchedulingPolicy=idle PIDFile=/run/radvd/radvd.pid +RuntimeDirectory=radvd +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW +AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_RAW +PrivateTmp=yes +PrivateDevices=yes +ProtectSystem=full +ProtectHome=yes +NoNewPrivileges=yes [Install] WantedBy=multi-user.target |