7b7eb0a6e5
Add the PrivateTmp, ProtectHome, and ProtectSystem directives to better secure the system from chronyd. It's taken from the Debian chrony package.
18 lines
433 B
Desktop File
18 lines
433 B
Desktop File
[Unit]
|
|
Description=NTP client/server
|
|
Documentation=man:chronyd(8) man:chrony.conf(5)
|
|
After=ntpdate.service sntp.service ntpd.service
|
|
Conflicts=ntpd.service systemd-timesyncd.service
|
|
ConditionCapability=CAP_SYS_TIME
|
|
|
|
[Service]
|
|
Type=forking
|
|
PIDFile=/var/run/chronyd.pid
|
|
EnvironmentFile=-/etc/sysconfig/chronyd
|
|
ExecStart=/usr/sbin/chronyd $OPTIONS
|
|
PrivateTmp=yes
|
|
ProtectHome=yes
|
|
ProtectSystem=full
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|