raspiblitz/home.admin/assets/bootstrap.service
openoms 2042167e8e
apply hardening measures to all systemd services
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
2021-06-02 09:18:29 +01:00

24 lines
No EOL
451 B
Desktop File

# Boostrap the RaspiBlitz
# /etc/systemd/system/bootstrap.service
[Unit]
Description=execute on every startup before everything else
After=network.target mnt-hdd.mount
[Service]
User=root
Group=root
Type=oneshot
RemainAfterExit=true
ExecStart=/home/admin/_bootstrap.sh
StandardOutput=journal
StandardError=journal
# Hardening measures
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true
[Install]
WantedBy=multi-user.target