graphene-os-server-infrastr.../systemd/system/chronyd.service.d/override.conf

[Service]
NoNewPrivileges=yes
ReadWritePaths=
ReadWritePaths=/run /var/lib/chrony -/var/log
Restart=always
RestartMaxDelaySec=10s
RestartSec=100ms
RestartSteps=5
RestrictAddressFamilies=~AF_NETLINK
enable auto-restart for unbound and chronyd 2024-09-14 22:22:32 -04:00			`[Service]`
add chronyd.service hardening based on not using sendmail This reverts the extra directives included in the standard chronyd.service for supporting sendmail. 2024-12-19 11:35:31 -05:00			`NoNewPrivileges=yes`
			`ReadWritePaths=`
			`ReadWritePaths=/run /var/lib/chrony -/var/log`
enable auto-restart for unbound and chronyd 2024-09-14 22:22:32 -04:00			`Restart=always`
use incrementing auto-restart delay 2024-09-15 00:19:19 -04:00			`RestartMaxDelaySec=10s`
			`RestartSec=100ms`
			`RestartSteps=5`
add chronyd.service hardening based on not using sendmail This reverts the extra directives included in the standard chronyd.service for supporting sendmail. 2024-12-19 11:35:31 -05:00			`RestrictAddressFamilies=~AF_NETLINK`