update unit files
This commit is contained in:
parent
ed6b129e8c
commit
18d5e53339
@ -20,6 +20,8 @@ PrivateTmp=true
|
|||||||
RestrictRealtime=yes
|
RestrictRealtime=yes
|
||||||
MemoryDenyWriteExecute=yes
|
MemoryDenyWriteExecute=yes
|
||||||
ProtectKernelModules=true
|
ProtectKernelModules=true
|
||||||
|
RestrictNamespaces=yes
|
||||||
|
LockPersonality=yes
|
||||||
SystemCallArchitectures=native
|
SystemCallArchitectures=native
|
||||||
ReadOnlyPaths=/
|
ReadOnlyPaths=/
|
||||||
ReadWritePaths=/tmp /var /run /dev/shm
|
ReadWritePaths=/tmp /var /run /dev/shm
|
||||||
|
@ -1,6 +1,7 @@
|
|||||||
[Unit]
|
[Unit]
|
||||||
Description=Highly configurable OOM prevention daemon
|
Description=Highly configurable OOM prevention daemon
|
||||||
Documentation=man:nohang(1) https://github.com/hakavlad/nohang
|
Documentation=man:nohang(1) https://github.com/hakavlad/nohang
|
||||||
|
Conflicts=nohang-desktop.service
|
||||||
After=system.slice
|
After=system.slice
|
||||||
|
|
||||||
[Service]
|
[Service]
|
||||||
@ -19,6 +20,8 @@ PrivateTmp=true
|
|||||||
RestrictRealtime=yes
|
RestrictRealtime=yes
|
||||||
MemoryDenyWriteExecute=yes
|
MemoryDenyWriteExecute=yes
|
||||||
ProtectKernelModules=true
|
ProtectKernelModules=true
|
||||||
|
RestrictNamespaces=yes
|
||||||
|
LockPersonality=yes
|
||||||
SystemCallArchitectures=native
|
SystemCallArchitectures=native
|
||||||
ReadOnlyPaths=/
|
ReadOnlyPaths=/
|
||||||
ReadWritePaths=/tmp /var /run /dev/shm
|
ReadWritePaths=/tmp /var /run /dev/shm
|
||||||
|
Loading…
Reference in New Issue
Block a user