summaryrefslogtreecommitdiffstats
path: root/roles/MX/files/etc/systemd/system/opendmarc.service.d/override.conf
blob: 1fb5567c0868281da78930451a784140978a21c6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
[Service]
Type=simple
User=opendmarc
ExecStart=
ExecStart=/usr/sbin/opendmarc -f -p fd:3
StandardOutput=journal
SyslogFacility=mail
RuntimeDirectory=opendmarc

# Hardening
NoNewPrivileges=yes
PrivateDevices=yes
ProtectHome=yes
ProtectSystem=strict
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes