summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorjirka-h <hladky.jiri@gmail.com>2019-09-27 17:31:23 +0200
committerGitHub <noreply@github.com>2019-09-27 17:31:23 +0200
commitcaf7642464ff934b940d56d98b5625ea81cf0565 (patch)
tree5c3ec6bf3916183b7b38d1941cfe747000814d3b
parentFixed invalid UTF-8 codes in ChangeLog (diff)
parentorder after systemd-tmpfiles-setup-dev.service (diff)
downloadhaveged-caf7642464ff934b940d56d98b5625ea81cf0565.tar.xz
haveged-caf7642464ff934b940d56d98b5625ea81cf0565.zip
Merge pull request #21 from eworm-de/service
Service file updates
-rw-r--r--init.d/service.fedora33
-rw-r--r--init.d/service.suse38
2 files changed, 39 insertions, 32 deletions
diff --git a/init.d/service.fedora b/init.d/service.fedora
index 2c581bf..ab46d01 100644
--- a/init.d/service.fedora
+++ b/init.d/service.fedora
@@ -1,13 +1,20 @@
-[Unit]
-Description=Entropy Daemon based on the HAVEGE algorithm
-Documentation=man:haveged(8) http://www.issihosts.com/haveged/
-DefaultDependencies=no
-Before=sysinit.target shutdown.target systemd-journald.service
-
-[Service]
-ExecStart=/usr/sbin/haveged -w 1024 -v 1 --Foreground
-Restart=always
-SuccessExitStatus=137 143
-
-[Install]
-WantedBy=sysinit.target
+[Unit]
+Description=Entropy Daemon based on the HAVEGE algorithm
+Documentation=man:haveged(8) http://www.issihosts.com/haveged/
+DefaultDependencies=no
+ConditionVirtualization=!container
+After=systemd-tmpfiles-setup-dev.service
+Before=sysinit.target shutdown.target systemd-journald.service
+
+[Service]
+ExecStart=/usr/sbin/haveged -w 1024 -v 1 --Foreground
+Restart=always
+SuccessExitStatus=137 143
+CapabilityBoundingSet=CAP_SYS_ADMIN
+NoNewPrivileges=on
+PrivateDevices=on
+PrivateNetwork=on
+ProtectSystem=full
+
+[Install]
+WantedBy=sysinit.target
diff --git a/init.d/service.suse b/init.d/service.suse
index 26bbd59..34d387c 100644
--- a/init.d/service.suse
+++ b/init.d/service.suse
@@ -1,19 +1,19 @@
-[Unit]
-Description=Entropy Daemon based on the HAVEGE algorithm
-Documentation=man:haveged(8) http://www.issihosts.com/haveged/
-DefaultDependencies=no
-ConditionVirtualization=!container
-#Conflicts=shutdown.target
-# Don't wait for systemd-random-seed.service, leads to deadlock with fips=1
-#After=systemd-random-seed.service
-Before=sysinit.target shutdown.target systemd-journald.service
-
-[Service]
-ExecStart=/usr/sbin/haveged -w 1024 -v 0 -F
-CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT
-PrivateNetwork=yes
-Restart=always
-SuccessExitStatus=137 143
-
-[Install]
-WantedBy=sysinit.target
+[Unit]
+Description=Entropy Daemon based on the HAVEGE algorithm
+Documentation=man:haveged(8) http://www.issihosts.com/haveged/
+DefaultDependencies=no
+ConditionVirtualization=!container
+#Conflicts=shutdown.target
+# Don't wait for systemd-random-seed.service, leads to deadlock with fips=1
+#After=systemd-random-seed.service
+Before=sysinit.target shutdown.target systemd-journald.service
+
+[Service]
+ExecStart=/usr/sbin/haveged -w 1024 -v 0 -F
+CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT
+PrivateNetwork=yes
+Restart=always
+SuccessExitStatus=137 143
+
+[Install]
+WantedBy=sysinit.target