2016-01-21 14:36:42 +01:00
|
|
|
[Unit]
|
|
|
|
|
Description=OpenLDAP Server Daemon
|
|
|
|
|
After=syslog.target network.target
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Type=forking
|
|
|
|
|
ExecStart=/usr/lib/openldap/start
|
|
|
|
|
|
2022-10-27 03:27:25 +02:00
|
|
|
# Hardening to prevent security escalation.
|
|
|
|
|
## Future hardening for FS protection.
|
|
|
|
|
# ProtectSystem=full
|
|
|
|
|
# ReadWritePaths=/etc/openldap/slapd.d /var/lib/ldap
|
|
|
|
|
|
|
|
|
|
RestrictSUIDSGID=true
|
|
|
|
|
NoNewPrivileges=true
|
|
|
|
|
PrivateTmp=true
|
|
|
|
|
PrivateDevices=true
|
|
|
|
|
ProtectHostname=true
|
|
|
|
|
ProtectClock=true
|
|
|
|
|
ProtectKernelTunables=true
|
|
|
|
|
ProtectKernelModules=true
|
|
|
|
|
ProtectKernelLogs=true
|
|
|
|
|
ProtectControlGroups=true
|
|
|
|
|
MemoryDenyWriteExecute=true
|
|
|
|
|
|
2016-01-21 14:36:42 +01:00
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
|
|
|
|
|
