summaryrefslogtreecommitdiff
path: root/assets/roentgen-guard.service
diff options
context:
space:
mode:
authorAndrew Guschin <guschin@altlinux.org>2026-10-30 03:10:41 +0400
committerAndrew Guschin <guschin@altlinux.org>2026-10-30 03:10:41 +0400
commitd608ffeeda1a479c9dc0e5f6ad269ba07a510d7f (patch)
tree3824ec9da5ca0adac913cc47e3e20054c3dc843a /assets/roentgen-guard.service
parent40cf3276cdc74bf6f1795990ed600891a637d1fe (diff)
Implement Linux proxy controller, subscription state, and CLI/TUI
Diffstat (limited to 'assets/roentgen-guard.service')
-rw-r--r--assets/roentgen-guard.service18
1 files changed, 18 insertions, 0 deletions
diff --git a/assets/roentgen-guard.service b/assets/roentgen-guard.service
new file mode 100644
index 0000000..8f04600
--- /dev/null
+++ b/assets/roentgen-guard.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=Roentgen persistent traffic guard and incoming-flow classification
+DefaultDependencies=no
+After=local-fs.target
+Before=network-pre.target NetworkManager.service systemd-networkd.service roentgen.service
+Wants=network-pre.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/roentgen guard
+RemainAfterExit=yes
+UMask=0077
+NoNewPrivileges=yes
+ProtectHome=yes
+ProtectSystem=strict
+
+[Install]
+WantedBy=network-pre.target