This unit is provided by:
Options
-
[Install]-
WantedBy=multi-user.target
-
-
[Service]-
CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH -
ExecStart=/usr/sbin/kanidm_unixd_tasks -
KillSignal=SIGINT -
MemoryDenyWriteExecuteIntroduced in systemd 231=yes -
NoNewPrivilegesIntroduced in systemd 239=yes -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateNetwork=yes -
PrivateTmp=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectSystemIntroduced in systemd 214=strict -
ReadWritePaths=/home /var/run/kanidm-unixd -
RestrictAddressFamilies=AF_UNIX -
Type=simple -
User=root
-
-
[Unit]-
After=chronyd.service ntpd.service network-online.target kanidm-unixd.service -
Description=Kanidm Local Tasks
-
Additionnal notes
Nothing here.