????
| Current Path : /usr/lib/systemd/system/ |
| Current File : //usr/lib/systemd/system/cmk-agent-ctl-daemon.service |
[Unit] Description=Checkmk agent controller daemon After=network.target Documentation=https://docs.checkmk.com/latest/en/agent_linux.html [Service] ExecStart=/usr/bin/cmk-agent-ctl daemon Type=simple Restart=on-failure UMask=0077 User=cmk-agent NoNewPrivileges=yes # added v184 CapabilityBoundingSet= # added v211 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX # added v214 ProtectHome=yes ProtectSystem=full # added v231 RestrictRealtime=yes # added v232 ProtectControlGroups=yes ProtectKernelModules=yes ProtectKernelTunables=yes RemoveIPC=yes # added v235 LockPersonality=yes # added v242 RestrictSUIDSGID=yes # added v244 ProtectKernelLogs=yes # added v245 ProtectClock=yes # added v239 PrivateMounts=yes # added v242 ProtectHostname=yes [Install] WantedBy=multi-user.target