update permission-hardener.service

Which is now only an additional opt-in systemd unit,
because permission-hardener is run by default at security-misc
package installation time.

https://github.com/Kicksecure/security-misc/pull/181
This commit is contained in:
Patrick Schleizer 2024-01-16 09:23:54 -05:00
parent 186f6015da
commit 3ba8fe586e
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 3 additions and 3 deletions

View file

@ -2,7 +2,7 @@
## See the file COPYING for copying conditions.
[Unit]
Description=SUID, SGID, Capability and File Permission Hardening
Description=Permission Hardener at Boot Time (opt-in in addition to security-misc package installation time hardening)
Documentation=https://github.com/Kicksecure/security-misc
DefaultDependencies=no
@ -13,7 +13,7 @@ After=local-fs.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=permission-hardener
ExecStart=permission-hardener enable
[Install]
WantedBy=sysinit.target