modules/rsync/templates/systemd-rsyncd.service.erb

   1 [Unit]
   2 Description=rsync daemon <%= @name %>
   3
   4 [Service]
   5 ExecStart=-/usr/bin/rsync --daemon --config=<%= @fname_real_rsync %>
   6 StandardInput=socket
   7 StandardError=journal
   8 CapabilityBoundingSet=CAP_SYS_CHROOT CAP_SETUID CAP_SETGID CAP_DAC_READ_SEARCH
   9 PrivateDevices=true
  10 PrivateNetwork=true
  11 ProtectHome=read-only
  12 ProtectSystem=full