Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-27 09:49:27 -05:00
Code Issues Packages Projects Releases Wiki Activity

systemd RemainAfterExit=yes

Browse Source 
for better usability

https://forums.whonix.org/t/restrict-hardware-information-to-root-testers-wanted/8618/33
This commit is contained in:
Patrick Schleizer 2021-04-03 11:44:13 -04:00
parent e8ea94325b
commit 41734ec523
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
5 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/systemd/system/hide-hardware-info.service
View File

@ -12,6 +12,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
ExecStart=/usr/lib/security-misc/hide-hardware-info ExecStart=/usr/lib/security-misc/hide-hardware-info
RemainAfterExit=yes
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target

1
lib/systemd/system/permission-hardening.service
View File

@ -14,6 +14,7 @@ After=local-fs.target
Type=oneshot Type=oneshot
RemainAfterExit=yes RemainAfterExit=yes
ExecStart=/usr/lib/security-misc/permission-hardening ExecStart=/usr/lib/security-misc/permission-hardening
RemainAfterExit=yes
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target

1
lib/systemd/system/proc-hidepid.service
View File

@ -12,6 +12,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc
RemainAfterExit=yes
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target

1
lib/systemd/system/remount-secure.service
View File

@ -16,6 +16,7 @@ After=qubes-sysinit.service
Type=oneshot Type=oneshot
RemainAfterExit=yes RemainAfterExit=yes
ExecStart=/usr/lib/security-misc/remount-secure ExecStart=/usr/lib/security-misc/remount-secure
RemainAfterExit=yes
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target

1
lib/systemd/system/remove-system-map.service
View File

@ -12,6 +12,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
ExecStart=/usr/lib/security-misc/remove-system.map ExecStart=/usr/lib/security-misc/remove-system.map
RemainAfterExit=yes
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target