blob: 8c7056be6c9f08f2a4ebea03703496577344fdb0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
--- ArchiSteamFarm@.service.org 2022-11-16 16:46:05.036505989 +0100
+++ ArchiSteamFarm@.service 2022-11-16 16:44:22.570447671 +0100
@@ -3,7 +3,7 @@
[Service]
EnvironmentFile=-/etc/asf/%i
-ExecStart=/home/%i/ArchiSteamFarm/ArchiSteamFarm --no-restart --process-required --service --system-required
+ExecStart=/usr/bin/dotnet /usr/lib/asf/ArchiSteamFarm.dll --no-restart --process-required --service --system-required
Restart=on-success
RestartSec=1s
SyslogIdentifier=asf-%i
@@ -27,7 +27,8 @@
ProtectKernelTunables=yes
ProtectProc=invisible
ProtectSystem=strict
-ReadWritePaths=/home/%i/ArchiSteamFarm /tmp
+ReadWritePaths=%h /tmp
+StateDirectory=%i
RemoveIPC=yes
RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=yes
@@ -39,9 +40,9 @@
# TODO: Requires systemd v247+ due to https://github.com/systemd/systemd/issues/16666 and https://github.com/JustArchiNET/ArchiSteamFarm/issues/2739
# Since we don't want to enforce OS upgrade for everybody just yet, it's commented out for now
# We'll likely enforce it when .NET switches to Debian 11+ requirement
-#SecureBits=noroot-locked
-#SystemCallFilter=@system-service
-#SystemCallFilter=~@privileged
+SecureBits=noroot-locked
+SystemCallFilter=@system-service
+SystemCallFilter=~@privileged
[Unit]
After=network.target
|