summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorava1ar2016-03-20 14:46:28 -0400
committerava1ar2016-03-20 14:46:28 -0400
commit35409c1db5d299f4363b13859e9412093ff7d1ce (patch)
treee00f4717d4765cbb62111fab86586e0bf9b1f562
parent95bfb5215e68f3d3664445bb582cdc2b155a3fbb (diff)
downloadaur-35409c1db5d299f4363b13859e9412093ff7d1ce.tar.gz
Systemd units are updated
-rw-r--r--softethervpn-bridge.service12
-rw-r--r--softethervpn-client.service12
-rw-r--r--softethervpn-server.service12
3 files changed, 30 insertions, 6 deletions
diff --git a/softethervpn-bridge.service b/softethervpn-bridge.service
index f18fe71f8086..eba1ca3dda31 100644
--- a/softethervpn-bridge.service
+++ b/softethervpn-bridge.service
@@ -1,11 +1,19 @@
[Unit]
-Description=SoftEther VPN Bridge daemon
+Description=SoftEther VPN Bridge
After=network.target
[Service]
Type=forking
ExecStart=/usr/bin/vpnbridge start
-ExecReload=/usr/bin/vpnbridge stop
+ExecStop=/usr/bin/vpnbridge stop
+Restart=on-failure
+
+# Hardening
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=full
+ReadOnlyDirectories=/
+ReadWriteDirectories=-/usr/lib/softethervpn/vpnbridge
[Install]
WantedBy=multi-user.target
diff --git a/softethervpn-client.service b/softethervpn-client.service
index b6c674c199c0..a9ae684f86dd 100644
--- a/softethervpn-client.service
+++ b/softethervpn-client.service
@@ -1,11 +1,19 @@
[Unit]
-Description=SoftEther VPN Client daemon
+Description=SoftEther VPN Client
After=network.target
[Service]
Type=forking
ExecStart=/usr/bin/vpnclient start
-ExecReload=/usr/bin/vpnclient stop
+ExecStop=/usr/bin/vpnclient stop
+Restart=on-failure
+
+# Hardening
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=full
+ReadOnlyDirectories=/
+ReadWriteDirectories=-/usr/lib/softethervpn/vpnclient
[Install]
WantedBy=multi-user.target
diff --git a/softethervpn-server.service b/softethervpn-server.service
index 50984e282184..87706aad7792 100644
--- a/softethervpn-server.service
+++ b/softethervpn-server.service
@@ -1,11 +1,19 @@
[Unit]
-Description=SoftEther VPN Server daemon
+Description=SoftEther VPN Server
After=network.target
[Service]
Type=forking
ExecStart=/usr/bin/vpnserver start
-ExecReload=/usr/bin/vpnserver stop
+ExecStop=/usr/bin/vpnserver stop
+Restart=on-failure
+
+# Hardening
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=full
+ReadOnlyDirectories=/
+ReadWriteDirectories=-/usr/lib/softethervpn/vpnserver
[Install]
WantedBy=multi-user.target