mirror of
https://github.com/ben-grande/qusal.git
synced 2024-12-28 08:59:32 -05:00
f30bd20f54
- Install RPC service to template; - Move qube configuration to template configuration; - Start server after the Qubes Services are created; - Qrexec policy ask to both app and disposable qube; and - Rename systemd service to qusal prefix instead of qubes.
25 lines
587 B
Desktop File
25 lines
587 B
Desktop File
# SPDX-FileCopyrightText: 2023 unman <unman@thirdeyesecurity.org>
|
|
#
|
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
|
|
|
[Unit]
|
|
Description=Print over Qrexec
|
|
After=qubes-sysinit.service
|
|
After=qubes-qrexec-agent.service
|
|
ConditionPathExists=/var/run/qubes-service/print-setup
|
|
|
|
[Service]
|
|
ExecStart=/usr/bin/socat TCP4-LISTEN:631,reuseaddr,fork,end-close EXEC:"qrexec-client-vm @default qusal.Print"
|
|
Restart=on-failure
|
|
RestartSec=3
|
|
|
|
# Hardening
|
|
ProtectSystem=full
|
|
PrivateTmp=true
|
|
SystemCallArchitectures=native
|
|
MemoryDenyWriteExecute=true
|
|
NoNewPrivileges=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|