Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 8 additions & 3 deletions scripts/beesd@.service.in
Original file line number Diff line number Diff line change
@@ -1,7 +1,9 @@
[Unit]
Description=Bees (%i)
Documentation=https://github.com/Zygo/bees
After=sysinit.target
# Prevents bees from still running while scanned FS is being unmounted
After=local-fs.target
Before=umount.target

[Service]
Type=simple
Expand All @@ -21,6 +23,9 @@ RuntimeDirectory=bees
StartupCPUWeight=25
StartupIOWeight=25

# Give beesd some time to flush everything before shutting down
TimeoutStopSec=300

# Hide other users' process in /proc/
ProtectProc=invisible

Expand All @@ -41,7 +46,7 @@ PrivateNetwork=true
PrivateIPC=true
ProtectHostname=true

# Disable write access to kernel variables throug /proc
# Disable write access to kernel variables through /proc
ProtectKernelTunables=true

# Disable access to control groups
Expand All @@ -56,4 +61,4 @@ AmbientCapabilities=CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SYS_ADMI
NoNewPrivileges=true

[Install]
WantedBy=basic.target
WantedBy=multi-user.target

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bees should not run in rescue mode anyway