summaryrefslogtreecommitdiff
path: root/assets/roentgen-guard.service
diff options
context:
space:
mode:
Diffstat (limited to 'assets/roentgen-guard.service')
-rw-r--r--assets/roentgen-guard.service18
1 files changed, 18 insertions, 0 deletions
diff --git a/assets/roentgen-guard.service b/assets/roentgen-guard.service
new file mode 100644
index 0000000..8f04600
--- /dev/null
+++ b/assets/roentgen-guard.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=Roentgen persistent traffic guard and incoming-flow classification
+DefaultDependencies=no
+After=local-fs.target
+Before=network-pre.target NetworkManager.service systemd-networkd.service roentgen.service
+Wants=network-pre.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/roentgen guard
+RemainAfterExit=yes
+UMask=0077
+NoNewPrivileges=yes
+ProtectHome=yes
+ProtectSystem=strict
+
+[Install]
+WantedBy=network-pre.target