summarylogtreecommitdiffstats
path: root/sheepit-client.service
diff options
context:
space:
mode:
Diffstat (limited to 'sheepit-client.service')
-rw-r--r--sheepit-client.service5
1 files changed, 4 insertions, 1 deletions
diff --git a/sheepit-client.service b/sheepit-client.service
index c1a0730f745..8a090216e40 100644
--- a/sheepit-client.service
+++ b/sheepit-client.service
@@ -9,9 +9,12 @@ NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateDevices=true
+ProtectKernelTunables=true
+ProtectControlGroups=true
RestrictNamespaces=true
CacheDirectory=sheepit-client/
-ExecStart=/usr/bin/sheepit-client
+CacheDirectoryMode=700
+ExecStart=/usr/bin/sheepit-client -config /etc/conf.d/sheepit-client
RestartSec=60
Restart=on-failure