This unit is provided by:
Options
-
[Install]-
WantedBy=multi-user.target
-
-
[Service]-
AmbientCapabilities=CAP_NET_BIND_SERVICE -
CacheDirectory=stubby -
CapabilityBoundingSet=CAP_NET_BIND_SERVICE -
DynamicUser=yes -
ExecStart=/usr/bin/stubby -
ExecStart=/usr/bin/stubby -C /etc/stubby/stubby.yml -
LockPersonalityIntroduced in systemd 235=yes -
MemoryDenyWriteExecuteIntroduced in systemd 231=yes -
NoNewPrivilegesIntroduced in systemd 239=yes -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateTmp=yes -
PrivateUsers=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHomeIntroduced in systemd 214=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectProcIntroduced in systemd 247=invisible -
ProtectSystemIntroduced in systemd 214=strict -
Restart=on-failure -
RestartSec=1 -
RestrictAddressFamilies=AF_INET AF_INET6 AF_NETLINK AF_UNIX -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
RestrictSUIDSGIDIntroduced in systemd 242=yes -
RuntimeDirectory=stubby -
SystemCallArchitectures=native -
SystemCallErrorNumber=EPERM -
SystemCallFilter=@system-service -
User=stubby -
WorkingDirectory=/run/stubby -
WorkingDirectory=/var/cache/stubby
-
-
[Unit]-
After=network-online.target -
Description=DNS Privacy Stub Resolver -
Description=stubby DNS resolver -
Documentation=https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby -
Wants=network-online.target
-
Additionnal notes
Nothing here.