Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- $ cat /lib/systemd/system/boinc-client.service
- [Unit]
- Description=Berkeley Open Infrastructure Network Computing Client
- Documentation=man:boinc(1)
- After=network-online.target
- [Service]
- Type=simple
- ProtectHome=true
- PrivateTmp=true
- ProtectSystem=strict
- ProtectControlGroups=true
- ReadWritePaths=-/var/lib/boinc -/etc/boinc-client
- Nice=10
- User=boinc
- WorkingDirectory=/var/lib/boinc
- ExecStart=/usr/bin/boinc
- ExecStop=/usr/bin/boinccmd --quit
- ExecReload=/usr/bin/boinccmd --read_cc_config
- ExecStopPost=/bin/rm -f lockfile
- IOSchedulingClass=idle
- Restart=on-failure
- # The following options prevent setuid root as they imply NoNewPrivileges=true
- # Since Atlas requires setuid root, they break Atlas
- # In order to improve security, if you're not using Atlas,
- # Add these options to the [Service] section of an override file using
- # sudo systemctl edit boinc-client.service
- #NoNewPrivileges=true
- #ProtectKernelModules=true
- #ProtectKernelTunables=true
- #RestrictRealtime=true
- #RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
- #RestrictNamespaces=true
- #PrivateUsers=true
- #CapabilityBoundingSet=
- #MemoryDenyWriteExecute=true
- [Install]
- WantedBy=multi-user.target
- $ ll /var/lib/boinc
- lrwxrwxrwx 1 boinc boinc 12 Sep 30 11:43 /var/lib/boinc -> boinc-client/
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement