2024-05-24 09:39:22 -04:00
|
|
|
# SPDX-FileCopyrightText: 2023 unman <unman@thirdeyesecurity.org>
|
|
|
|
|
#
|
|
|
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
|
|
|
|
|
|
[Unit]
|
|
|
|
|
Description=Print over Qrexec
|
2024-06-19 09:40:20 -04:00
|
|
|
After=qubes-sysinit.service
|
2024-05-24 09:39:22 -04:00
|
|
|
After=qubes-qrexec-agent.service
|
|
|
|
|
ConditionPathExists=/var/run/qubes-service/print-setup
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
ExecStart=/usr/bin/socat TCP4-LISTEN:631,reuseaddr,fork,end-close EXEC:"qrexec-client-vm @default qusal.Print"
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
RestartSec=3
|
|
|
|
|
|
|
|
|
|
# Hardening
|
|
|
|
|
ProtectSystem=full
|
|
|
|
|
PrivateTmp=true
|
|
|
|
|
SystemCallArchitectures=native
|
|
|
|
|
MemoryDenyWriteExecute=true
|
|
|
|
|
NoNewPrivileges=true
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
