nxshock/simplefileshare
1
0
Fork 0
mirror of https://github.com/nxshock/simplefileshare.git synced 2025-07-02 00:13:36 +05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Import project

Browse source
This commit is contained in:
nxshock 2021-08-31 19:07:19 +05:00
parent f0e39831c2
commit 1b0cbbf5cd
13 changed files with 588 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

41
simplefileshare.service Normal file
View file

@ -0,0 +1,41 @@
[Unit]
Description=simplefileshare service
[Service]
Type=simple
User=simplefileshare
ExecStart=/usr/bin/simplefileshare
Restart=on-failure
RestartSec=10s
SecureBits=keep-caps
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
DevicePolicy=closed
IPAccounting=true
LockPersonality=true
MemoryDenyWriteExecute=true
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectClock=true
ProtectControlGroups=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=
RemoveIPC=true
RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=@system-service
SystemCallFilter=~@resources
UMask=0027
[Install]
WantedBy=multi-user.target