mirror of
https://github.com/tasket/Qubes-VM-hardening.git
synced 2024-10-01 06:35:42 -04:00
23 lines
700 B
Desktop File
23 lines
700 B
Desktop File
[Unit]
|
|
Description=Protect Qubes VM execution environment at startup
|
|
Documentation=https://github.com/tasket/Qubes-VM-hardening
|
|
After=qubes-sysinit.service
|
|
Before=qubes-mount-dirs.service
|
|
ConditionPathExists=|/var/run/qubes-service/vm-boot-protect
|
|
ConditionPathExists=|/var/run/qubes-service/vm-boot-protect-root
|
|
ConditionPathExists=|/var/run/qubes-service/vm-boot-protect-cli
|
|
DefaultDependencies=false
|
|
#OnFailure=rescue.target
|
|
#OnFailureJobMode=replace-irreversibly
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=no
|
|
# privdirs must begin with /rw
|
|
# Environment="privdirs=/rw/config /rw/usrlocal /rw/bind-dirs"
|
|
ExecStart=/usr/lib/qubes/init/vm-boot-protect.sh
|
|
Restart=no
|
|
|
|
[Install]
|
|
WantedBy=sysinit.target
|