This unit is provided by:
Options
-
[Service]-
CapabilityBoundingSet= -
ExecStart=/usr/bin/geoipsets --output-dir /var/local -
LockPersonalityIntroduced in systemd 235=yes -
MemoryDenyWriteExecuteIntroduced in systemd 231=yes -
NoNewPrivilegesIntroduced in systemd 239=yes -
PrivateDevicesIntroduced in systemd 209=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHomeIntroduced in systemd 214=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectProcIntroduced in systemd 247=invisible -
ProtectSystemIntroduced in systemd 214=full -
RestrictAddressFamilies=AF_INET AF_INET6 -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
RestrictSUIDSGIDIntroduced in systemd 242=yes -
StandardError=journal -
StandardOutput=journal -
SystemCallArchitectures=native -
SystemCallFilter=@system-service -
Type=oneshot
-
-
[Unit]-
After=network.target network-online.target -
AssertFileIsExecutable=/usr/bin/geoipsets -
AssertPathExists=/var/local -
Description=Update geoipsets -
Wants=network.target network-online.target
-
Additionnal notes
Nothing here.