security-misc/usr/lib/systemd/system/remount-secure.service
2024-05-11 13:18:36 +10:00

33 lines
729 B
Desktop File

## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit]
Description=remount /home /tmp /dev/shm /run with nosuid,nodev (default) and noexec (opt-in)
Documentation=https://github.com/Kicksecure/security-misc
ConditionKernelCommandLine=!remountsecure=0
DefaultDependencies=no
Before=sysinit-post.target
Before=basic.target
Before=multi-user.target
Before=graphical.target
Before=getty-pre.target
Before=network-pre.target
After=local-fs.target
After=sysinit.target
After=qubes-sysinit.service
Requires=local-fs.target
Requires=sysinit.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=remount-secure 3
[Install]
WantedBy=sysinit-post.target