40da3305b4
See also https://www.freedesktop.org/software/systemd/man/systemd.exec.html#Sandboxing Change-Id: I7ae1070c170db2f91dbeb177f03390a0b45143eb Reviewed-on: https://gerrit.libreoffice.org/c/online/+/88128 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Jan Holesovsky <kendy@collabora.com>
23 lines
580 B
Desktop File
23 lines
580 B
Desktop File
[Unit]
|
|
Description=LibreOffice Online WebSocket Daemon
|
|
After=network.target
|
|
|
|
[Service]
|
|
EnvironmentFile=-/etc/sysconfig/loolwsd
|
|
ExecStart=/usr/bin/loolwsd --version --o:sys_template_path=/opt/lool/systemplate --o:child_root_path=/opt/lool/child-roots --o:file_server_root_path=/usr/share/loolwsd
|
|
KillSignal=SIGINT
|
|
TimeoutStopSec=120
|
|
User=lool
|
|
KillMode=control-group
|
|
Restart=always
|
|
|
|
ProtectSystem=strict
|
|
ReadWritePaths=/opt/lool
|
|
|
|
ProtectHome=yes
|
|
PrivateTmp=yes
|
|
ProtectControlGroups=yes
|
|
CapabilityBoundingSet=CAP_FOWNER CAP_MKNOD CAP_SYS_CHROOT
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|