This unit is provided by:
Options
-
[Service]
-
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT
-
ExecStart=/usr/bin/haveged -w 1024 -v 1 --once --Foreground
-
ExecStart=/usr/sbin/haveged -w 1024 -v 1 --once --Foreground
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=no
-
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=full -
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
SecureBits=noroot-locked
-
SuccessExitStatus=137 143
-
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service ~@mount
-
Type=oneshot
-
-
[Unit]
-
DefaultDependencies=no
-
Description=Entropy Daemon based on the HAVEGE algorithm
-
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
-
Additionnal notes
Nothing here.