summarylogtreecommitdiffstats
path: root/Patch01-systemd-service-file-upgrade-and-harden.patch
blob: 5ef625b88a20d7589b1794d353b0a089590182ac (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
--- openarc-1.2.1/contrib/systemd/openarc.service.in	2025-01-07 00:09:10.000000000 +0200
+++ openarc-1.2.1/contrib/systemd/openarc.service.in.new	2025-04-06 18:47:10.178209114 +0200
@@ -8,13 +8,15 @@
 [Service]
 Type=simple
 EnvironmentFile=-@sysconfdir@/sysconfig/openarc
+RuntimeDirectory=openarc
+RuntimeDirectoryMode=0750
 ExecStart=@sbindir@/openarc -f $OPTIONS
 ExecReload=/bin/kill -USR1 $MAINPID
 Restart=on-abnormal
 User=openarc
 Group=openarc
-PermissionsStartOnly=true
-ExecStartPre=-/usr/bin/install -d -m 0755 -o openarc -g openarc @localstatedir@/run/openarc
+ProtectSystem=strict
+ProtectHome=true
 
 [Install]
 WantedBy=multi-user.target