mirror of
https://gitlab.com/mobian1/eg25-manager.git
synced 2025-08-29 23:32:14 +02:00
162fcf6fca
Additional security options in kernel config make it more picky, removing problematic directives (`DeviceAllow` and `ProtectClock`) from the service file helps getting things straight. Other options aren't recognized by our systemd version (`ProtectKernelModules`, `ProtectProc`, `ProtectDevices` and `ProtectKernelLog`), so we can just as well remove those.
23 lines
418 B
Desktop File
23 lines
418 B
Desktop File
[Unit]
|
|
Description=Quectel EG25 modem
|
|
Before=ModemManager.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=/usr/bin/eg25manager
|
|
Restart=on-failure
|
|
ProtectControlGroups=true
|
|
ProtectHome=true
|
|
ProtectKernelTunables=true
|
|
ProtectSystem=strict
|
|
RestrictSUIDSGID=true
|
|
PrivateTmp=true
|
|
MemoryDenyWriteExecute=true
|
|
PrivateMounts=true
|
|
NoNewPrivileges=true
|
|
CapabilityBoundingSet=
|
|
LockPersonality=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|