mirror of
https://github.com/xcat2/confluent.git
synced 2024-11-28 20:39:40 +00:00
c0cd6de4f7
PrivateDevices breaks pam_unix, for some reason. Remove this protection. We still have DevicePolicy closed and running as non-root, so this should still be relatively safe.i
27 lines
603 B
Desktop File
27 lines
603 B
Desktop File
# IBM(c) 2015 Apache 2.0
|
|
# Lenovo(c) 2020 Apache 2.0
|
|
[Unit]
|
|
Description=Confluent hardware manager
|
|
|
|
[Service]
|
|
Type=forking
|
|
#PIDFile=/var/run/confluent/pid
|
|
RuntimeDirectory=confluent
|
|
StateDirectory=confluent
|
|
CacheDirectory=confluent
|
|
LogsDirectory=confluent
|
|
ConfigurationDirectory=confluent
|
|
ExecStart=/opt/confluent/bin/confluent
|
|
ExecStop=/opt/confluent/bin/confetty shutdown /
|
|
Restart=on-failure
|
|
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETUID CAP_SETGID CAP_CHOWN
|
|
User=confluent
|
|
Group=confluent
|
|
DevicePolicy=closed
|
|
ProtectControlGroups=true
|
|
ProtectSystem=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
|