This unit is provided by:
Options
-
[Service]
-
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-
ExecStart=/usr/bin/mailman notify
-
IOSchedulingClass=best-effort
-
IOSchedulingPriority=7
-
LockPersonality
Introduced in systemd 235=yes -
LogsDirectory=mailman
-
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
Nice=19
-
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=yes
-
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=strict -
ReadOnlyPaths=/etc/mailman.cfg -/etc/mailman.d
-
ReadWritePaths=/var/lock/mailman /var/spool/mailman
-
RemoveIPC
Introduced in systemd 232=yes -
RestrictAddressFamilies=~AF_PACKET
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
RuntimeDirectory=mailman
-
StateDirectory=mailman
-
SystemCallArchitectures=native
-
SystemCallFilter=@system-service ~@privileged @resources
-
Type=forking
-
User=mailman
-
-
[Unit]
-
After=mailman3.service
-
Description=GNU Mailing List Notify
-
Documentation=https://mailman.readthedocs.io/en/latest/src/mailman/commands/docs/notify.html
-
JoinsNamespaceOf=mailman3.service
-
Requires=mailman3.service
-
Additionnal notes
Nothing here.