mirror of
https://git.yoctoproject.org/meta-security
synced 2026-07-17 16:17:11 +00:00
Anton Antonov
71fd7eda04
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
29 lines
907 B
Diff
29 lines
907 B
Diff
|
|
Run the Parsec service as parsec user in /var/lib/parsec/ working directory.
|
|
|
|
Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>
|
|
Upstream-Status: Inappropriate [deployment configuration]
|
|
|
|
diff --git a/systemd-daemon/parsec.service b/systemd-daemon/parsec.service
|
|
index c07c3b9..a6fe6a3 100644
|
|
--- a/systemd-daemon/parsec.service
|
|
+++ b/systemd-daemon/parsec.service
|
|
@@ -3,13 +3,15 @@ Description=Parsec Service
|
|
Documentation=https://parallaxsecond.github.io/parsec-book/parsec_service/install_parsec_linux.html
|
|
|
|
[Service]
|
|
-WorkingDirectory=/home/parsec/
|
|
+User=parsec
|
|
+Group=parsec
|
|
+WorkingDirectory=/var/lib/parsec/
|
|
ExecStart=/usr/libexec/parsec/parsec --config /etc/parsec/config.toml
|
|
# Systemd hardening
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
ProtectHostname=true
|
|
-ProtectKernelTunables=true
|
|
+#ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|