update unit files

This commit is contained in:
Alexey Avramov 2019-12-08 21:47:01 +09:00
parent ed6b129e8c
commit 18d5e53339
2 changed files with 5 additions and 0 deletions

View File

@ -20,6 +20,8 @@ PrivateTmp=true
RestrictRealtime=yes
MemoryDenyWriteExecute=yes
ProtectKernelModules=true
RestrictNamespaces=yes
LockPersonality=yes
SystemCallArchitectures=native
ReadOnlyPaths=/
ReadWritePaths=/tmp /var /run /dev/shm

View File

@ -1,6 +1,7 @@
[Unit]
Description=Highly configurable OOM prevention daemon
Documentation=man:nohang(1) https://github.com/hakavlad/nohang
Conflicts=nohang-desktop.service
After=system.slice
[Service]
@ -19,6 +20,8 @@ PrivateTmp=true
RestrictRealtime=yes
MemoryDenyWriteExecute=yes
ProtectKernelModules=true
RestrictNamespaces=yes
LockPersonality=yes
SystemCallArchitectures=native
ReadOnlyPaths=/
ReadWritePaths=/tmp /var /run /dev/shm