Reinhard Max
dadd8c60c2
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort OBS-URL: https://build.opensuse.org/request/show/924895 OBS-URL: https://build.opensuse.org/package/show/network:time/ntp?expand=0&rev=206
33 lines
766 B
Desktop File
33 lines
766 B
Desktop File
[Unit]
|
|
Description=NTP Server Daemon
|
|
Documentation=man:ntpd(1)
|
|
After=nss-lookup.target
|
|
Conflicts=systemd-timesyncd.service
|
|
Wants=network.target
|
|
After=network.target
|
|
Wants=time-sync.target
|
|
Before=time-sync.target
|
|
ConditionVirtualization=!container
|
|
ConditionCapability=CAP_SYS_TIME
|
|
|
|
[Service]
|
|
Type=forking
|
|
PIDFile=/run/ntp/ntpd.pid
|
|
ExecStart=/usr/sbin/start-ntpd start
|
|
RestartSec=11min
|
|
Restart=always
|
|
PrivateTmp=true
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
ProtectHostname=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
# end of automatic additions
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|