diff --git a/salt/sys-electrs/files/server/systemd/bitcoin-p2p-qrexec@.service b/salt/sys-electrs/files/server/systemd/bitcoin-p2p-qrexec@.service index 9c2cf8f..d71dd7c 100644 --- a/salt/sys-electrs/files/server/systemd/bitcoin-p2p-qrexec@.service +++ b/salt/sys-electrs/files/server/systemd/bitcoin-p2p-qrexec@.service @@ -5,6 +5,7 @@ [Unit] Description=Bitcoin P2P over Qrexec ConditionPathExists=/var/run/qubes-service/bitcoin-client +After=qubes-sysinit.service Requires=bitcoin-rpc-qrexec.socket [Service] diff --git a/salt/sys-print/files/client/systemd/qusal-print-forwarder.service b/salt/sys-print/files/client/systemd/qusal-print-forwarder.service index dc06013..ea3eb34 100644 --- a/salt/sys-print/files/client/systemd/qusal-print-forwarder.service +++ b/salt/sys-print/files/client/systemd/qusal-print-forwarder.service @@ -1,4 +1,5 @@ # SPDX-FileCopyrightText: 2023 unman +# SPDX-FileCopyrightText: 2024 Benjamin Grande M. S. # # SPDX-License-Identifier: AGPL-3.0-or-later @@ -15,7 +16,7 @@ RestartSec=3 # Hardening ProtectSystem=full -PrivateTmp=true + SystemCallArchitectures=native MemoryDenyWriteExecute=true NoNewPrivileges=true diff --git a/salt/sys-rsync/files/client/systemd/qubes-rsync-forwarder.socket b/salt/sys-rsync/files/client/systemd/qubes-rsync-forwarder.socket index 83b0f87..9e06c1d 100644 --- a/salt/sys-rsync/files/client/systemd/qubes-rsync-forwarder.socket +++ b/salt/sys-rsync/files/client/systemd/qubes-rsync-forwarder.socket @@ -1,9 +1,10 @@ -# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S.