This unit is provided by:
Options
-
[Install]
-
WantedBy=multi-user.target
-
-
[Service]
-
CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN CAP_SYS_MODULE
-
EnvironmentFile=-/etc/default/knockd
-
EnvironmentFile=-/etc/sysconfig/knockd
-
ExecReload=/bin/kill -HUP $MAINPID
-
ExecStart=/usr/bin/knockd
-
ExecStart=/usr/sbin/knockd
-
ExecStart=/usr/sbin/knockd $KNOCKD_OPTS
-
ExecStart=/usr/sbin/knockd -d $OPTIONS
-
KillMode=mixed
-
PrivateDevices
Introduced in systemd 209=yes -
ProtectClock
Introduced in systemd 245=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=full -
ProtectSystem
Introduced in systemd 214=yes -
RestrictRealtime
Introduced in systemd 231=yes -
SuccessExitStatus=0 2 15
-
Type=forking
-
-
[Unit]
-
After=network-online.target
-
After=network.target
-
Description=A port-knocking server
-
Description=Port-Knock Daemon
-
Description=Port-Knocking Daemon
-
Documentation=man:knockd(1)
-
Wants=network-online.target
-
Additionnal notes
Nothing here.