Set PrivateNetwork=true

This commit is contained in:
Alexey Avramov 2019-12-08 21:10:22 +09:00
parent a8a9c83e10
commit ed6b129e8c
2 changed files with 8 additions and 4 deletions

View File

@ -6,14 +6,16 @@ After=system.slice
[Service] [Service]
ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang-desktop.conf ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang-desktop.conf
SyslogIdentifier=nohang-desktop
Restart=always Restart=always
RestartSec=0 RestartSec=0
KillMode=mixed KillMode=mixed
TasksMax=100 TasksMax=100
Nice=-15 Nice=-5
CPUSchedulingResetOnFork=true CPUSchedulingResetOnFork=true
OOMScoreAdjust=-10 OOMScoreAdjust=-5
UMask=0027 UMask=0027
PrivateNetwork=true
PrivateTmp=true PrivateTmp=true
RestrictRealtime=yes RestrictRealtime=yes
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes

View File

@ -5,14 +5,16 @@ After=system.slice
[Service] [Service]
ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang.conf ExecStart=:TARGET_BIN:/nohang --config :TARGET_CONF:/nohang/nohang.conf
SyslogIdentifier=nohang
Restart=always Restart=always
RestartSec=0 RestartSec=0
KillMode=mixed KillMode=mixed
TasksMax=100 TasksMax=100
Nice=-15 Nice=-5
CPUSchedulingResetOnFork=true CPUSchedulingResetOnFork=true
OOMScoreAdjust=-10 OOMScoreAdjust=-5
UMask=0027 UMask=0027
PrivateNetwork=true
PrivateTmp=true PrivateTmp=true
RestrictRealtime=yes RestrictRealtime=yes
MemoryDenyWriteExecute=yes MemoryDenyWriteExecute=yes