|
Bernhard M. Wiedemann |
a7c934 |
[Unit]
|
|
Bernhard M. Wiedemann |
a7c934 |
Description=Process accounting
|
|
Bernhard M. Wiedemann |
a7c934 |
Documentation=man:accton(8)
|
|
Bernhard M. Wiedemann |
a7c934 |
|
|
Bernhard M. Wiedemann |
a7c934 |
[Service]
|
|
|
cdf3a5 |
# added automatically, for details please see
|
|
|
cdf3a5 |
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
|
cdf3a5 |
ProtectSystem=full
|
|
|
cdf3a5 |
ProtectHome=true
|
|
|
cdf3a5 |
PrivateDevices=true
|
|
|
cdf3a5 |
ProtectHostname=true
|
|
|
cdf3a5 |
ProtectClock=true
|
|
|
cdf3a5 |
ProtectKernelTunables=true
|
|
|
cdf3a5 |
ProtectKernelModules=true
|
|
|
cdf3a5 |
ProtectKernelLogs=true
|
|
|
cdf3a5 |
ProtectControlGroups=true
|
|
Bernhard M. Wiedemann |
a7c934 |
Type=oneshot
|
|
Bernhard M. Wiedemann |
a7c934 |
RemainAfterExit=true
|
|
Bernhard M. Wiedemann |
a7c934 |
ExecStartPre=/usr/bin/chmod 600 /var/log/account/pacct
|
|
Bernhard M. Wiedemann |
a7c934 |
ExecStart=/usr/sbin/accton /var/log/account/pacct
|
|
Bernhard M. Wiedemann |
a7c934 |
ExecStop=/usr/sbin/accton off
|
|
Bernhard M. Wiedemann |
a7c934 |
|
|
Bernhard M. Wiedemann |
a7c934 |
[Install]
|
|
Bernhard M. Wiedemann |
a7c934 |
WantedBy=multi-user.target
|