diff options
author | Andrea Tarocchi | 2018-03-15 11:17:32 +0100 |
---|---|---|
committer | Andrea Tarocchi | 2018-03-15 11:17:32 +0100 |
commit | 31fcc89b61207c792a21f4c209b26d3fd0851f69 (patch) | |
tree | 91f14ac3afc9a5243d20ce431c2f3e77d3607348 /wesnothd-devel.service | |
parent | 30c178797f48cd8be46111fa3fad27e18f37b431 (diff) | |
download | aur-31fcc89b61207c792a21f4c209b26d3fd0851f69.tar.gz |
Updated to 1.13.11 thanks to RoundCube.
Diffstat (limited to 'wesnothd-devel.service')
-rw-r--r-- | wesnothd-devel.service | 29 |
1 files changed, 27 insertions, 2 deletions
diff --git a/wesnothd-devel.service b/wesnothd-devel.service index 7d6fedea6a73..1ff24c2a642c 100644 --- a/wesnothd-devel.service +++ b/wesnothd-devel.service @@ -1,9 +1,34 @@ [Unit] Description=Wesnoth-devel Server Daemon +Documentation=https://www.wesnoth.org/wiki/ServerAdministration +Documentation=man:/usr/share/man/wesnoth-devel/man6/wesnothd.6.gz After=network.target +Conflicts=wesnothd.service [Service] -ExecStart=/usr/bin/wesnothd-devel +ExecStart=/usr/bin/wesnothd-devel -t 2 -T 5 +# you can use -c to specify the same configuration file +# which is used when starting wensothd from the wesnoth UI +# (and make sure wesnothd has the required access permissions) + +SyslogIdentifier=Wesnothd-devel +User=nobody +Group=nobody +ExecStopPost=/usr/bin/rm -f /run/wesnothd-devel/socket + +# Additional security-related features +ProtectSystem=yes +PrivateTmp=yes +PrivateDevices=yes +NoNewPrivileges=yes +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +RestrictRealtime=yes +MemoryDenyWriteExecute=yes +SystemCallArchitectures=native +ProtectControlGroups=yes +ProtectKernelTunables=yes +ProtectKernelModules=yes +RestrictNamespaces=yes [Install] -WantedBy=multi-user.target
\ No newline at end of file +WantedBy=multi-user.target |