Qubes-VM-hardening/lib/systemd/system/vm-sudo-protect.service

[Unit]
Description=Script protections to enhance vm-sudo
After=qubes-sysinit.service
Before=qubes-mount-dirs.service
ConditionPathExists=|/var/run/qubes-service/vm-sudo-protect
ConditionPathExists=|/var/run/qubes-service/vm-sudo-protect-root
DefaultDependencies=false
OnFailure=shutdown.target
OnFailureJobMode=replace-irreversibly

[Service]
Type=oneshot
RemainAfterExit=no
ExecStart=/usr/lib/qubes/init/vm-sudo-protect.sh

[Install]
WantedBy=sysinit.target
Create vm-sudo-protect.service 2017-04-17 14:21:07 -04:00			`[Unit]`
			`Description=Script protections to enhance vm-sudo`
Update vm-sudo-protect.service Should allow service to run without interference. Now supported as Qubes service `vm-sudo-protect`. 2017-04-20 19:20:25 -04:00			`After=qubes-sysinit.service`
Add parameters for Whonix Tested briefly on Whonix. Don't use 'vm-sudo-protect-root' service. 2017-04-21 11:26:55 -04:00			`Before=qubes-mount-dirs.service`
Update vm-sudo-protect.service 2017-04-20 19:35:53 -04:00			`ConditionPathExists=\|/var/run/qubes-service/vm-sudo-protect`
			`ConditionPathExists=\|/var/run/qubes-service/vm-sudo-protect-root`
Add parameters for Whonix Tested briefly on Whonix. Don't use 'vm-sudo-protect-root' service. 2017-04-21 11:26:55 -04:00			`DefaultDependencies=false`
Fixes for testing. 2017-05-09 19:02:54 -04:00			`OnFailure=shutdown.target`
			`OnFailureJobMode=replace-irreversibly`
Create vm-sudo-protect.service 2017-04-17 14:21:07 -04:00
			`[Service]`
			`Type=oneshot`
			`RemainAfterExit=no`
			`ExecStart=/usr/lib/qubes/init/vm-sudo-protect.sh`

			`[Install]`
Update vm-sudo-protect.service Should allow service to run without interference. Now supported as Qubes service `vm-sudo-protect`. 2017-04-20 19:20:25 -04:00			`WantedBy=sysinit.target`