diff options
| author | Costa Tsaousis <costa@tsaousis.gr> | 2016-08-16 02:36:12 +0300 |
|---|---|---|
| committer | Costa Tsaousis <costa@tsaousis.gr> | 2016-08-16 02:36:12 +0300 |
| commit | f78f32cd77f28a251d3a9a5f7423b2745ceaefa1 (patch) | |
| tree | a2dd4ca8b8a39a34c458c372b009f3441a086b32 /system | |
| parent | 53262d9f6e00dca3ac1f761a5b7f459e347ef6f0 (diff) | |
cleanup netdata.service - fixes #773; netdata now verifies it has to its required directories before starting
Diffstat (limited to 'system')
| -rw-r--r-- | system/netdata.service.in | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/system/netdata.service.in b/system/netdata.service.in index f537cfae04..e260e27380 100644 --- a/system/netdata.service.in +++ b/system/netdata.service.in @@ -4,41 +4,12 @@ After=network.target httpd.service squid.service nfs-server.service mysqld.servi [Service] Type=simple -WorkingDirectory=/tmp User=netdata Group=netdata -RuntimeDirectory=netdata ExecStart=@sbindir_POST@/netdata -D -# ----------------------------------------------------------------------------- -# Stopping netdata - -KillMode=mixed -KillSignal=SIGTERM - # saving a big db on slow disks may need some time TimeoutStopSec=60 -# and disable SIGKILL - if sent during save, we will loose the db -SendSIGKILL=no - -# ----------------------------------------------------------------------------- -# Hardening netdata - -# These will apply these capabilities to the entire netdata process tree -# We don't want this - only apps.plugin needs them -# AmbientCapabilities=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE -# CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE - -PrivateTmp=true -ProtectSystem=full -ProtectHome=read-only - -# is implicitly set by the MemoryDenyWriteExecute=true -# NoNewPrivileges=true - -# Do not enable - it makes node.js plugins to crash -# MemoryDenyWriteExecute=true - [Install] WantedBy=multi-user.target |