initial commit
Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: Ib131388c1056b6708b730a35011811026a6a6964
This commit is contained in:
commit
033e253259
33 changed files with 3126 additions and 0 deletions
34
contrib/systemd/pscand.service
Normal file
34
contrib/systemd/pscand.service
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Unit]
|
||||
Description=Pluggable System Condition Monitoring Daemon
|
||||
Documentation=https://github.com/pscand/pscand
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
ExecStart=/usr/bin/pscand run --config /etc/pscand/pscand.conf
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
User=root
|
||||
Group=root
|
||||
|
||||
# Log to journal
|
||||
StandardOutput=journal
|
||||
StandardError=journal
|
||||
|
||||
# Capabilities for sensor access
|
||||
AmbientCapabilities=CAP_SYS_ADMIN CAP_DAC_OVERRIDE
|
||||
|
||||
# Security hardening
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
NoNewPrivileges=false
|
||||
|
||||
# Runtime directory
|
||||
RuntimeDirectory=pscand
|
||||
RuntimeDirectoryMode=0755
|
||||
|
||||
# Tempfs for sensitive /proc data
|
||||
PrivateTmp=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Loading…
Add table
Add a link
Reference in a new issue