Takashi Iwai
bf729c85d4
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/921082 OBS-URL: https://build.opensuse.org/package/show/multimedia:apps/icecast?expand=0&rev=37
41 lines
1.0 KiB
Desktop File
41 lines
1.0 KiB
Desktop File
# This file is part of package postfix.
|
|
#
|
|
# Copyright (c) 2013 Pascal Bleser <pascal.bleser@opensuse.org>
|
|
# Authors:
|
|
# * Pascal Bleser
|
|
# * http://pyn00b.blogspot.be/2012/11/life-with-systemd-part-2.html
|
|
# * Werner Fink for the postfix.service file
|
|
#
|
|
# Description:
|
|
#
|
|
# Used to start the Icecast server.
|
|
#
|
|
|
|
[Unit]
|
|
Description=Icecast Server
|
|
Requires=var-run.mount network.target remote-fs.target time-sync.target
|
|
After=var-run.mount network.target remote-fs.target time-sync.target
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
PrivateDevices=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
RestrictRealtime=true
|
|
# end of automatic additions
|
|
ExecStart=/usr/bin/icecast -b -c /etc/icecast.xml
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
ExecStop=/bin/kill -TERM $MAINPID
|
|
Type=forking
|
|
PIDFile=/var/run/icecast.pid
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|