Set PrivateNetwork=true

This commit is contained in:
Alexey Avramov 2019-12-08 21:10:22 +09:00
parent a8a9c83e10
commit ed6b129e8c
2 changed files with 8 additions and 4 deletions

View File

@ -6,14 +6,16 @@ After=system.slice
[Service]
ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang-desktop.conf
SyslogIdentifier=nohang-desktop
Restart=always
RestartSec=0
KillMode=mixed
TasksMax=100
Nice=-15
Nice=-5
CPUSchedulingResetOnFork=true
OOMScoreAdjust=-10
OOMScoreAdjust=-5
UMask=0027
PrivateNetwork=true
PrivateTmp=true
RestrictRealtime=yes
MemoryDenyWriteExecute=yes

View File

@ -5,14 +5,16 @@ After=system.slice
[Service]
ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang.conf
SyslogIdentifier=nohang
Restart=always
RestartSec=0
KillMode=mixed
TasksMax=100
Nice=-15
Nice=-5
CPUSchedulingResetOnFork=true
OOMScoreAdjust=-10
OOMScoreAdjust=-5
UMask=0027
PrivateNetwork=true
PrivateTmp=true
RestrictRealtime=yes
MemoryDenyWriteExecute=yes