34 lines
1.2 KiB
Diff
34 lines
1.2 KiB
Diff
diff -Nur ngircd-24.orig/contrib/ngircd.service ngircd-24/contrib/ngircd.service
|
|
--- ngircd-24.orig/contrib/ngircd.service 2017-01-07 13:24:46.000000000 -0700
|
|
+++ ngircd-24/contrib/ngircd.service 2017-01-28 15:36:45.127789109 -0700
|
|
@@ -11,11 +11,8 @@
|
|
Before=bopm.service
|
|
|
|
[Service]
|
|
-Type=forking
|
|
-User=irc
|
|
-Group=irc
|
|
# Settings & limits:
|
|
-CapabilityBoundingSet=CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
|
|
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE CAP_KILL
|
|
MemoryDenyWriteExecute=yes
|
|
NoNewPrivileges=yes
|
|
PrivateDevices=yes
|
|
@@ -27,15 +24,8 @@
|
|
ProtectSystem=full
|
|
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
|
RestrictRealtime=yes
|
|
-RuntimeDirectory=ircd
|
|
-RuntimeDirectoryMode=750
|
|
-# Try to load "default files" from any Debian package variant to keep this
|
|
-# unit generic.
|
|
-EnvironmentFile=-/etc/default/ngircd
|
|
-EnvironmentFile=-/etc/default/ngircd-full
|
|
-EnvironmentFile=-/etc/default/ngircd-full-dbg
|
|
# Start ngIRCd. Note: systemd doesn't allow to use $DAEMON here!
|
|
-ExecStart=/usr/sbin/ngircd $PARAMS
|
|
+ExecStart=/usr/sbin/ngircd -n
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
Restart=on-failure
|
|
|
|
Binary files ngircd-24.orig/contrib/.ngircd.service.swp and ngircd-24/contrib/.ngircd.service.swp differ
|