github/nohang
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update systemd units

Browse Source
This commit is contained in:
Alexey Avramov 2020-07-02 23:54:48 +09:00
parent 22ac9833bc
commit c3c0b510a8
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
systemd/nohang-desktop.service.in
View File

@ -2,7 +2,7 @@
Description=Sophisticated low memory handler Description=Sophisticated low memory handler
Documentation=man:nohang(8) https://github.com/hakavlad/nohang Documentation=man:nohang(8) https://github.com/hakavlad/nohang
Conflicts=nohang.service Conflicts=nohang.service
After=system.slice After=sysinit.target
[Service] [Service]
ExecStart=:TARGET_SBINDIR:/nohang --monitor --config :TARGET_SYSCONFDIR:/nohang/nohang-desktop.conf ExecStart=:TARGET_SBINDIR:/nohang --monitor --config :TARGET_SYSCONFDIR:/nohang/nohang-desktop.conf
@ -26,6 +26,7 @@ ProtectKernelTunables=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectControlGroups=true ProtectControlGroups=true
PrivateDevices=true PrivateDevices=true
PrivateTmp=true
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes
RestrictNamespaces=yes RestrictNamespaces=yes
LockPersonality=yes LockPersonality=yes

3
systemd/nohang.service.in
View File

@ -2,7 +2,7 @@
Description=Sophisticated low memory handler Description=Sophisticated low memory handler
Documentation=man:nohang(8) https://github.com/hakavlad/nohang Documentation=man:nohang(8) https://github.com/hakavlad/nohang
Conflicts=nohang-desktop.service Conflicts=nohang-desktop.service
After=system.slice After=sysinit.target
[Service] [Service]
ExecStart=:TARGET_SBINDIR:/nohang --monitor --config :TARGET_SYSCONFDIR:/nohang/nohang.conf ExecStart=:TARGET_SBINDIR:/nohang --monitor --config :TARGET_SYSCONFDIR:/nohang/nohang.conf
@ -26,6 +26,7 @@ ProtectKernelTunables=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectControlGroups=true ProtectControlGroups=true
PrivateDevices=true PrivateDevices=true
PrivateTmp=true
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes
RestrictNamespaces=yes RestrictNamespaces=yes
LockPersonality=yes LockPersonality=yes