2019-09-30 10:31:38 -04:00
|
|
|
[Unit]
|
|
|
|
|
Description=Arpwatch daemon which keeps track of ethernet/ip address pairings
|
|
|
|
|
After=syslog.target network-online.target
|
2023-10-26 19:33:22 +08:00
|
|
|
Wants=network-online.target
|
|
|
|
|
Documentation=man:arpwatch(8)
|
2019-09-30 10:31:38 -04:00
|
|
|
[Service]
|
2023-10-26 19:33:22 +08:00
|
|
|
Type=simple
|
2019-09-30 10:31:38 -04:00
|
|
|
PrivateTmp=yes
|
2023-10-26 19:33:22 +08:00
|
|
|
EnvironmentFile=-/etc/sysconfig/arpwatch
|
|
|
|
|
ExecStart=/usr/sbin/arpwatch -u arpwatch -F $OPTIONS
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
|
|
|
|
|
ProtectProc=invisible
|
|
|
|
|
CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN CAP_SETGID CAP_SETUID
|
|
|
|
|
ProtectSystem=full
|
|
|
|
|
ProtectHome=true
|
|
|
|
|
ProtectClock=true
|
|
|
|
|
ProtectKernelTunables=true
|
|
|
|
|
ProtectKernelModules=true
|
|
|
|
|
ProtectControlGroups=true
|
|
|
|
|
RestrictSUIDSGID=true
|
|
|
|
|
SystemCallFilter=@system-service
|
|
|
|
|
SystemCallFilter=~@aio @chown @clock @ipc @keyring @memlock @resources
|
|
|
|
|
SystemCallArchitectures=native
|
2019-09-30 10:31:38 -04:00
|
|
|
[Install]
|
2023-10-26 19:33:22 +08:00
|
|
|
WantedBy=multi-user.target
|
