forked from pool/spamassassin
- Drop ProtectHome from spamd.service and spampd.service. Unfortunately spamassing writes there, so ProtectHome=read-only doesn't work. Whitelisting a specific part has a too high chance of breaking for this package (bsc#1193248) OBS-URL: https://build.opensuse.org/request/show/947612 OBS-URL: https://build.opensuse.org/package/show/devel:languages:perl/spamassassin?expand=0&rev=155
43 lines
1.2 KiB
Desktop File
43 lines
1.2 KiB
Desktop File
# This file is part of package amavisd.
|
|
#
|
|
# Copyright (c) 2011 SuSE LINUX Products GmbH, Germany.
|
|
# Author: Werner Fink
|
|
# Please send feedback to http://www.suse.de/feedback
|
|
#
|
|
# Description:
|
|
#
|
|
# Used to start the spamd the daemonized version of spamassassin
|
|
# spamassassin adds a header line that shows if the mail has been
|
|
# determined spam or not. This way, you can decide what to do with the
|
|
# mail within the scope of your own filtering rules in your MUA (Mail
|
|
# User Agent, your mail program) or your LDA (Local Delivery Agent).
|
|
#
|
|
|
|
[Unit]
|
|
Description=Daemonized version of spamassassin
|
|
Wants=remote-fs.target network.target
|
|
After=remote-fs.target network.target
|
|
Before=mail-transfer-agent.target
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
PrivateDevices=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
RestrictRealtime=true
|
|
# end of automatic additions
|
|
Type=forking
|
|
PIDFile=/run/spamd.pid
|
|
EnvironmentFile=-/etc/sysconfig/spamd
|
|
ExecStart=/usr/sbin/spamd $SPAMD_ARGS -r /run/spamd.pid
|
|
ExecReload=/usr/bin/kill -HUP $MAINPID
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|