summaryrefslogtreecommitdiff
path: root/assets/roentgen-guard.service
blob: 8f04600d8d62fc252736d65e00187b9c830384da (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
[Unit]
Description=Roentgen persistent traffic guard and incoming-flow classification
DefaultDependencies=no
After=local-fs.target
Before=network-pre.target NetworkManager.service systemd-networkd.service roentgen.service
Wants=network-pre.target

[Service]
Type=oneshot
ExecStart=/usr/local/bin/roentgen guard
RemainAfterExit=yes
UMask=0077
NoNewPrivileges=yes
ProtectHome=yes
ProtectSystem=strict

[Install]
WantedBy=network-pre.target