blob: 25258985a9bbb4e2d8931e6c83e9acd2d238680b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
|
Run the Parsec service as parsec user in /var/lib/parsec/ working directory.
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
Upstream-Status: Inappropriate [deployment configuration]
diff --git a/systemd-daemon/parsec.service b/systemd-daemon/parsec.service
index c07c3b9..a6fe6a3 100644
--- a/systemd-daemon/parsec.service
+++ b/systemd-daemon/parsec.service
@@ -3,13 +3,15 @@ Description=Parsec Service
Documentation=https://parallaxsecond.github.io/parsec-book/parsec_service/install_parsec_linux.html
[Service]
-WorkingDirectory=/home/parsec/
+User=parsec
+Group=parsec
+WorkingDirectory=/var/lib/parsec/
ExecStart=/usr/libexec/parsec/parsec --config /etc/parsec/config.toml
# Systemd hardening
ProtectSystem=full
ProtectHome=true
ProtectHostname=true
-ProtectKernelTunables=true
+#ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
|
