2022-12-12 15:39:47 +00:00
|
|
|
# vim: syntax=systemd
|
2014-01-07 11:03:42 +00:00
|
|
|
[Unit]
|
|
|
|
|
Description=Arpwatch daemon which keeps track of ethernet/ip address pairings
|
2017-08-14 11:36:03 +00:00
|
|
|
After=network.target
|
2021-01-29 08:00:20 +00:00
|
|
|
After=exim.service
|
|
|
|
|
After=postfix.service
|
|
|
|
|
After=sendmail.service
|
2017-08-14 11:36:03 +00:00
|
|
|
PartOf=arpwatch.target
|
2014-01-07 11:03:42 +00:00
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Type=forking
|
|
|
|
|
Environment=ARPWATCH_ARGS=
|
|
|
|
|
EnvironmentFile=-/etc/sysconfig/arpwatch
|
|
|
|
|
PrivateTmp=yes
|
2021-08-12 06:25:47 +00:00
|
|
|
# added automatically, for details please see
|
|
|
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
|
|
|
ProtectSystem=full
|
|
|
|
|
ProtectHome=true
|
|
|
|
|
PrivateDevices=true
|
|
|
|
|
ProtectHostname=true
|
|
|
|
|
ProtectClock=true
|
|
|
|
|
ProtectKernelTunables=true
|
|
|
|
|
ProtectKernelModules=true
|
|
|
|
|
ProtectKernelLogs=true
|
|
|
|
|
ProtectControlGroups=true
|
|
|
|
|
RestrictRealtime=true
|
|
|
|
|
# end of automatic additions
|
2014-01-07 11:03:42 +00:00
|
|
|
ExecStartPre=/usr/bin/touch /var/lib/arpwatch/arp.dat.%i
|
|
|
|
|
ExecStart=/usr/sbin/arpwatch $ARPWATCH_ARGS -i %i -f /var/lib/arpwatch/arp.dat.%i
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|