sslh/trunk/sslh-select.service

   1 [Unit]
   2 Description=SSL/SSH multiplexer (select mode)
   3 Conflicts=sslh-fork.service sslh.socket
   4 After=network.target
   5
   6 [Service]
   7 ExecStart=/usr/bin/sslh-select --config /etc/sslh.cfg --foreground
   8 KillMode=process
   9 ProtectSystem=strict
  10 ProtectHome=true
  11 ProtectKernelModules=true
  12 ProtectKernelTunables=true
  13 ProtectControlGroups=true
  14 PrivateTmp=true
  15 PrivateDevices=true
  16 SecureBits=noroot-locked
  17 MountFlags=private
  18 NoNewPrivileges=true
  19 CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_NET_BIND_SERVICE CAP_NET_RAW
  20 AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_RAW
  21 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
  22 MemoryDenyWriteExecute=true
  23 User=sslh
  24 DynamicUser=true
  25
  26 [Install]
  27 WantedBy=multi-user.target