bird/trunk/bird.service

   1 [Unit]
   2 Description=BIRD routing daemon
   3 After=network.target
   4
   5 [Service]
   6 Type=forking
   7 ExecStart=/usr/bin/bird
   8 ExecReload=/usr/bin/birdc configure
   9 ExecStop=/usr/bin/birdc down
  10 RuntimeDirectory=bird
  11 RuntimeDirectoryMode=0750
  12 DynamicUser=true
  13 User=bird
  14 ProtectSystem=strict
  15 ProtectHome=true
  16 ProtectKernelTunables=true
  17 ProtectControlGroups=true
  18 PrivateTmp=true
  19 PrivateDevices=true
  20 CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
  21 AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
  22
  23 [Install]
  24 WantedBy=multi-user.target