Qubes-VM-hardening/lib/systemd/system/vm-sudo-protect.service
2017-05-12 05:47:53 -04:00

19 lines
522 B
Desktop File

[Unit]
Description=Script protections to enhance vm-sudo
After=qubes-sysinit.service
Before=qubes-mount-dirs.service
ConditionPathExists=|/var/run/qubes-service/vm-sudo-protect
ConditionPathExists=|/var/run/qubes-service/vm-sudo-protect-root
DefaultDependencies=false
OnFailure=shutdown.target
OnFailureJobMode=replace-irreversibly
[Service]
Type=oneshot
RemainAfterExit=no
#Environment="privdirs=/rw/config /rw/usrlocal /rw/bind-dirs"
ExecStart=/usr/lib/qubes/init/vm-sudo-protect.sh
[Install]
WantedBy=sysinit.target