mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-09-21 21:44:58 +02:00
31 lines
783 B
SYSTEMD
31 lines
783 B
SYSTEMD
[Unit]
|
|
Description = Anonymizing overlay network for TCP
|
|
After = syslog.target network.target nss-lookup.target
|
|
|
|
[Service]
|
|
Type = notify
|
|
NotifyAccess = all
|
|
ExecStartPre = @BINDIR@/tor -f @CONFDIR@/torrc --verify-config
|
|
ExecStart = @BINDIR@/tor -f @CONFDIR@/torrc
|
|
ExecReload = /bin/kill -HUP ${MAINPID}
|
|
KillSignal = SIGINT
|
|
TimeoutSec = 30
|
|
Restart = on-failure
|
|
WatchdogSec = 1m
|
|
LimitNOFILE = 32768
|
|
|
|
# Hardening
|
|
PrivateTmp = yes
|
|
PrivateDevices = yes
|
|
ProtectHome = yes
|
|
ProtectSystem = full
|
|
ReadOnlyDirectories = /
|
|
ReadWriteDirectories = -@LOCALSTATEDIR@/lib/tor
|
|
ReadWriteDirectories = -@LOCALSTATEDIR@/log/tor
|
|
NoNewPrivileges = yes
|
|
ReadWriteDirectories = -@LOCALSTATEDIR@/run/tor
|
|
CapabilityBoundingSet = CAP_SETUID CAP_SETGID CAP_NET_BIND_SERVICE
|
|
|
|
[Install]
|
|
WantedBy = multi-user.target
|