summaryrefslogtreecommitdiffstats
path: root/misc-utils/uuidd.service.in
diff options
context:
space:
mode:
Diffstat (limited to 'misc-utils/uuidd.service.in')
-rw-r--r--misc-utils/uuidd.service.in12
1 files changed, 12 insertions, 0 deletions
diff --git a/misc-utils/uuidd.service.in b/misc-utils/uuidd.service.in
index 531672765..b4c9c4635 100644
--- a/misc-utils/uuidd.service.in
+++ b/misc-utils/uuidd.service.in
@@ -1,5 +1,6 @@
[Unit]
Description=Daemon for generating UUIDs
+Documentation=man:uuidd(8)
Requires=uuidd.socket
[Service]
@@ -7,6 +8,17 @@ ExecStart=@usrsbin_execdir@/uuidd --socket-activation
Restart=no
User=uuidd
Group=uuidd
+ProtectSystem=strict
+ProtectHome=yes
+PrivateDevices=yes
+PrivateNetwork=yes
+PrivateUsers=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictAddressFamilies=AF_UNIX
+MemoryDenyWriteExecute=yes
+SystemCallFilter=@default @file-system @basic-io @system-service @signal @io-event @network-io
[Install]
Also=uuidd.socket