diff options
author | mrxx | 2020-03-10 22:05:31 +0100 |
---|---|---|
committer | mrxx | 2020-03-10 22:05:31 +0100 |
commit | 9c21589e4eda58c9eb35db5c966a14c908eac163 (patch) | |
tree | f9856d02c0fe9d06dd140c7d53c040ce0d9d8aa1 /bitcoind-reindex.service | |
parent | b54edd50a6836880fc08b29932c6c4edc8b24d01 (diff) | |
download | aur-9c21589e4eda58c9eb35db5c966a14c908eac163.tar.gz |
Remove nproc from make; Update service units
Diffstat (limited to 'bitcoind-reindex.service')
-rw-r--r-- | bitcoind-reindex.service | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/bitcoind-reindex.service b/bitcoind-reindex.service index 6cc8c7708c96..5418f52da700 100644 --- a/bitcoind-reindex.service +++ b/bitcoind-reindex.service @@ -5,8 +5,9 @@ # See "man systemd.service" for details. # Note that almost all daemon options could be specified in -# /etc/bitcoin/bitcoin.conf, except for those explicitly specified as arguments -# in ExecStart= +# /etc/bitcoin/bitcoin.conf, but keep in mind those explicitly +# specified as arguments in ExecStart= will override those in the +# config file. [Unit] Description=Bitcoin daemon (reindex) @@ -19,6 +20,10 @@ ExecStart=/usr/bin/bitcoind -daemon \ -reindex \ -datadir=/var/lib/bitcoind +# Make sure the config directory is readable by the service user +PermissionsStartOnly=true +ExecStartPre=/bin/chgrp bitcoin /etc/bitcoin + # Process management #################### @@ -54,6 +59,9 @@ PrivateTmp=true # Mount /usr, /boot/ and /etc read-only for the process. ProtectSystem=full +# Deny access to /home, /root and /run/user +ProtectHome=true + # Disallow the process and all of its children to gain # new privileges through execve(). NoNewPrivileges=true |