blob: 1db43b5ea9fe7a4dc9a73fcd9e2e72c6c518d5c1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
#
# Peekaboo Extended Email Attachment Behavior Observation Owl
# Copyright (c) 2016-2019 science + computing ag.
#
# Install as /etc/systemd/system/peekaboo.service
#
[Unit]
Description=Peekaboo Extended Email Attachment Behavior Observation Owl
After=network.target cuckoo-api.service
[Service]
User=peekaboo
Group=amavis
WorkingDirectory=/opt/peekaboo/
ExecStart=/opt/peekaboo/bin/peekaboo -c /opt/peekaboo/etc/peekaboo.conf -D
PIDFile=/var/run/peekaboo/peekaboo.pid
KillMode=control-group
Restart=always
Type=notify
StandardOutput=journal
StandardError=journal
RuntimeDirectory=peekaboo
RuntimeDirectoryMode=750
DeviceAllow=/dev/null rw
CapabilityBoundingSet=~CAP_SYS_PTRACE
ProtectSystem=full
# strict
# Not supported by "stable" systemd
# ReadWritePaths=/opt/peekaboo/tmp
# ProtectControlGroups=true
# ProtectKernelTunables=true
# ProtectKernelModules=true
# RestrictRealtime=true
[Install]
WantedBy=multi-user.target
Alias=peekabood.service
|
