add dogecoind-1.14.3.ebuild
[portage-squeep] / www-servers / apache / .unused / files / apache2.2-hardened.service
1 [Unit]
2 Description=The Apache HTTP Server
3 After=network.target remote-fs.target nss-lookup.target
4
5 [Service]
6 EnvironmentFile=/etc/conf.d/apache2
7 ExecStart=/usr/sbin/apache2 $APACHE2_OPTS -DFOREGROUND
8 ExecReload=/usr/sbin/apache2 $APACHE2_OPTS -k graceful
9 ExecStop=/usr/sbin/apache2 $APACHE2_OPTS -k graceful-stop
10 # We want systemd to give httpd some time to finish gracefully, but still want
11 # it to kill httpd after TimeoutStopSec if something went wrong during the
12 # graceful stop. Normally, Systemd sends SIGTERM signal right after the
13 # ExecStop, which would kill httpd. We are sending useless SIGCONT here to give
14 # httpd time to finish.
15 KillSignal=SIGCONT
16 PrivateTmp=true
17 #Hardening
18 PrivateTmp=true
19 CapabilityBoundingSet=CAP_CHOWN CAP_SETGID CAP_SETUID CAP_DAC_OVERRIDE CAP_KILL CAP_NET_BIND_SERVICE CAP_IPC_LOCK
20 SecureBits=noroot-locked
21 ProtectSystem=full
22 NoNewPrivileges=true
23 PrivateDevices=true
24 MemoryDenyWriteExecute=true
25
26 [Install]
27 WantedBy=multi-user.target