This unit is provided by:
Options
-
[Service]-
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT -
ExecStart=/usr/bin/haveged -w 1024 -v 1 --once --Foreground -
ExecStart=/usr/sbin/haveged -w 1024 -v 1 --once --Foreground -
LockPersonalityIntroduced in systemd 235=yes -
MemoryDenyWriteExecuteIntroduced in systemd 231=yes -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateTmp=no -
ProtectHomeIntroduced in systemd 214=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectSystemIntroduced in systemd 214=full -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
SecureBits=noroot-locked -
SuccessExitStatus=137 143 -
SystemCallArchitectures=native -
SystemCallErrorNumber=EPERM -
SystemCallFilter=@system-service ~@mount -
Type=oneshot
-
-
[Unit]-
DefaultDependencies=no -
Description=Entropy Daemon based on the HAVEGE algorithm -
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
-
Additionnal notes
Nothing here.