New upstream version 5.2.5188
This commit is contained in:
@@ -1,13 +1,11 @@
|
||||
[Unit]
|
||||
Description=SoftEther VPN Bridge
|
||||
After=network.target auditd.service
|
||||
ConditionPathExists=!/opt/vpnbridge/do_not_run
|
||||
ConditionPathExists=!@DIR@/softether/vpnbridge/do_not_run
|
||||
|
||||
[Service]
|
||||
Type=forking
|
||||
ExecStart=/opt/vpnbridge/vpnbridge start
|
||||
ExecStop=/opt/vpnbridge/vpnbridge stop
|
||||
KillMode=process
|
||||
Type=exec
|
||||
ExecStart=@DIR@/softether/vpnbridge/vpnbridge execsvc
|
||||
Restart=on-failure
|
||||
|
||||
# Hardening
|
||||
@@ -15,9 +13,8 @@ PrivateTmp=yes
|
||||
ProtectHome=yes
|
||||
ProtectSystem=full
|
||||
ReadOnlyDirectories=/
|
||||
ReadWriteDirectories=-/opt/vpnbridge
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
|
||||
ReadWriteDirectories=-@DIR@/softether/vpnbridge
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
|
||||
@@ -1,14 +1,11 @@
|
||||
[Unit]
|
||||
Description=SoftEther VPN Client
|
||||
After=network.target auditd.service
|
||||
ConditionPathExists=!/opt/vpnclient/do_not_run
|
||||
ConditionPathExists=!@DIR@/softether/vpnclient/do_not_run
|
||||
|
||||
[Service]
|
||||
Type=forking
|
||||
EnvironmentFile=-/opt/vpnclient
|
||||
ExecStart=/opt/vpnclient/vpnclient start
|
||||
ExecStop=/opt/vpnclient/vpnclient stop
|
||||
KillMode=process
|
||||
Type=exec
|
||||
ExecStart=@DIR@/softether/vpnclient/vpnclient execsvc
|
||||
Restart=on-failure
|
||||
|
||||
# Hardening
|
||||
@@ -16,10 +13,8 @@ PrivateTmp=yes
|
||||
ProtectHome=yes
|
||||
ProtectSystem=full
|
||||
ReadOnlyDirectories=/
|
||||
ReadWriteDirectories=-/opt/vpnclient
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
|
||||
ReadWriteDirectories=-@DIR@/softether/vpnclient
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
|
||||
|
||||
@@ -1,14 +1,12 @@
|
||||
[Unit]
|
||||
Description=SoftEther VPN Server
|
||||
After=network.target auditd.service
|
||||
ConditionPathExists=!/opt/vpnserver/do_not_run
|
||||
ConditionPathExists=!@DIR@/softether/vpnserver/do_not_run
|
||||
|
||||
[Service]
|
||||
Type=forking
|
||||
EnvironmentFile=-/opt/vpnserver
|
||||
ExecStart=/opt/vpnserver/vpnserver start
|
||||
ExecStop=/opt/vpnserver/vpnserver stop
|
||||
KillMode=process
|
||||
Type=exec
|
||||
TasksMax=infinity
|
||||
ExecStart=@DIR@/softether/vpnserver/vpnserver execsvc
|
||||
Restart=on-failure
|
||||
|
||||
# Hardening
|
||||
@@ -16,10 +14,8 @@ PrivateTmp=yes
|
||||
ProtectHome=yes
|
||||
ProtectSystem=full
|
||||
ReadOnlyDirectories=/
|
||||
ReadWriteDirectories=-/opt/vpnserver
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYS_ADMIN CAP_SETUID
|
||||
ReadWriteDirectories=-@DIR@/softether/vpnserver
|
||||
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_SYS_NICE CAP_SYSLOG CAP_SETUID
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user