jitterentropy.service

This unit is provided by:

• https://packages.debian.org/unstable/jitterentropy-rngd

Options

• [Install]
  • Alias=jitterentropy-rngd.service
  • WantedBy=basic.target
• [Service]
  • CapabilityBoundingSet=CAP_SYS_ADMIN
  • DeviceAllow=/dev/null rw /dev/random rw
  • DevicePolicy=strict
  • ExecStart=/usr/sbin/jitterentropy-rngd
  • IPAddressDeny=any
  • LimitMEMLOCK=0
  • LockPersonality
    Introduced in systemd 235
    =yes
  • MemoryDenyWriteExecute
    Introduced in systemd 231
    =yes
  • MountFlags=private
  • NoNewPrivileges
    Introduced in systemd 239
    =yes
  • PrivateDevices
    Introduced in systemd 209
    =yes
  • PrivateMounts=yes
  • PrivateNetwork=yes
  • PrivateTmp=yes
  • PrivateUsers=no
  • ProtectControlGroups
    Introduced in systemd 232
    =yes
  • ProtectHome
    Introduced in systemd 214
    =yes
  • ProtectKernelModules
    Introduced in systemd 232
    =yes
  • ProtectKernelTunables
    Introduced in systemd 232
    =yes
  • ProtectSystem
    Introduced in systemd 214
    =strict
  • ReadOnlyPaths=-/
  • RemoveIPC
    Introduced in systemd 232
    =yes
  • RestrictAddressFamilies=
  • RestrictNamespaces
    Introduced in systemd 233
    =yes
  • RestrictRealtime
    Introduced in systemd 231
    =yes
  • SystemCallArchitectures=native
  • SystemCallFilter=@system-service ~@chown @clock @cpu-emulation @debug @ipc @module @mount @obsolete @privileged @raw-io @reboot @resources @swap memfd_create mincore mlock mlockall personality
  • UMask=0077
• [Unit]
  • After=local-fs.target
  • Before=sysinit.target
  • DefaultDependencies=no
  • Description=Jitterentropy Gatherer Daemon

Additionnal notes

Nothing here.