be00fec85c
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/923720 OBS-URL: https://build.opensuse.org/package/show/games:tools/mumble?expand=0&rev=137
36 lines
920 B
Desktop File
36 lines
920 B
Desktop File
# This file is part of package mumble-server.
|
|
#
|
|
# Copyright (c) 2013 Pascal Bleser <pascal.bleser@opensuse.org>
|
|
# Author: Pascal Bleser
|
|
#
|
|
# Description:
|
|
#
|
|
# Used to start the Mumble server (murmurd)
|
|
#
|
|
|
|
[Unit]
|
|
Description=Mumble Server (murmur)
|
|
Requires=var-run.mount network.target remote-fs.target time-sync.target
|
|
After=var-run.mount network.target remote-fs.target time-sync.target mysql.target
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
PrivateDevices=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
RestrictRealtime=true
|
|
# end of automatic additions
|
|
User=mumble-server
|
|
Group=mumble-server
|
|
ExecStart=/usr/sbin/murmurd -fg -ini /etc/mumble-server.ini
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|