From 74377fb5e1043c6c5141f096b66f225878c9e249 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Tue, 10 Oct 2017 07:53:43 +0200 Subject: allocate a dynamic user --- systemd/pacdbserve.service | 3 +-- systemd/pacredir.service | 3 +-- systemd/pacserve.service | 3 +-- 3 files changed, 3 insertions(+), 6 deletions(-) diff --git a/systemd/pacdbserve.service b/systemd/pacdbserve.service index bf2b80d..a94238d 100644 --- a/systemd/pacdbserve.service +++ b/systemd/pacdbserve.service @@ -3,9 +3,8 @@ Description=Darkhttpd to serve pacman db files After=network.target [Service] -User=nobody -Group=nobody ExecStart=/usr/bin/pacdbserve /var/lib/pacman/sync/ --ipv6 --port 7079 --no-listing +DynamicUser=on ProtectSystem=full ProtectHome=on PrivateDevices=on diff --git a/systemd/pacredir.service b/systemd/pacredir.service index d0189ea..a20f8f8 100644 --- a/systemd/pacredir.service +++ b/systemd/pacredir.service @@ -5,9 +5,8 @@ After=avahi-daemon.service network.target network-online.target [Service] Type=notify -User=nobody -Group=nobody ExecStart=/usr/bin/pacredir +DynamicUser=on ProtectSystem=full ProtectHome=on PrivateDevices=on diff --git a/systemd/pacserve.service b/systemd/pacserve.service index ee51821..1e414db 100644 --- a/systemd/pacserve.service +++ b/systemd/pacserve.service @@ -3,9 +3,8 @@ Description=Darkhttpd to serve pacman cache After=network.target [Service] -User=nobody -Group=nobody ExecStart=/usr/bin/pacserve /var/cache/pacman/pkg/ --ipv6 --port 7078 --no-listing +DynamicUser=on ProtectSystem=full ProtectHome=on PrivateDevices=on -- cgit v1.2.3-54-g00ecf