From 4601b932429f45cacd81c6a5add65f4677722bae Mon Sep 17 00:00:00 2001
From: Alexey Avramov <hakavlad@gmail.com>
Date: Tue, 1 Oct 2019 07:36:24 +0900
Subject: [PATCH] update nohang.service

---
 nohang/nohang.service.in | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/nohang/nohang.service.in b/nohang/nohang.service.in
index 1e16c27..47fec88 100644
--- a/nohang/nohang.service.in
+++ b/nohang/nohang.service.in
@@ -5,10 +5,19 @@ Documentation=man:nohang(1) https://github.com/hakavlad/nohang
 [Service]
 ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang.conf
 Restart=always
+RestartSec=0
 KillMode=mixed
-OOMPolicy=continue
 Nice=-15
 CPUSchedulingResetOnFork=true
+OOMScoreAdjust=-10
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+MemoryDenyWriteExecute=yes
+SystemCallFilter=~@mount
+ProtectSystem=full
+ProtectControlGroups=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
 
 [Install]
 WantedBy=multi-user.target