38 lines
1.3 KiB
Desktop File
38 lines
1.3 KiB
Desktop File
# Uninstalled until independently qualified namespace/endpoint policy exists.
|
|
[Unit]
|
|
Description=Archipelago independently owned finite namespace endpoints
|
|
Before=archipelago.service
|
|
After=local-fs.target
|
|
Requires=user-runtime-dir@1000.service
|
|
After=user-runtime-dir@1000.service
|
|
|
|
[Service]
|
|
Type=notify
|
|
NotifyAccess=main
|
|
User=root
|
|
Group=root
|
|
ExecStart=/usr/bin/python3 -I -S /usr/lib/archipelago/c01_network_owner.py
|
|
RuntimeDirectory=archipelago-c01-network
|
|
RuntimeDirectoryMode=0700
|
|
NoNewPrivileges=yes
|
|
UMask=0077
|
|
Restart=no
|
|
KillMode=control-group
|
|
TimeoutStopSec=infinity
|
|
SendSIGKILL=no
|
|
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_NET_BIND_SERVICE CAP_NET_ADMIN
|
|
# Real Tor drops UID and dumpability; enumerating/pinning its listening socket
|
|
# requires effective ptrace authority, not merely a bounding-set ceiling.
|
|
AmbientCapabilities=CAP_SYS_PTRACE CAP_DAC_OVERRIDE
|
|
ProtectSystem=strict
|
|
# Empty home/runtime-user views, with only the appointed runtime directory below.
|
|
# ProtectHome=yes hides this bind's parent and makes the private bus unreachable.
|
|
ProtectHome=tmpfs
|
|
BindReadOnlyPaths=/run/user/1000
|
|
PrivateTmp=yes
|
|
ReadWritePaths=/run/archipelago-c01-network
|
|
TasksMax=8
|
|
MemoryMax=256M
|
|
LimitNOFILE=2048
|
|
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
|