f688e680c9
- The command 'systemd-analyze syscall-filter' shows that the group
@system-service added to the xrdp-service SystemCallFilter
actually includes all of the other listed groups and individual
services. Consequently this line can be simplified to just specify
@system-service.
- (reversion) The SystemCallErrorNumber setting in xrdp.service has been
removed so that unauthorized system calls cause an immediate process exit.
(cherry picked from commit e0e9177f5e)
17 lines
404 B
SYSTEMD
17 lines
404 B
SYSTEMD
[Unit]
|
|
Description=xrdp daemon
|
|
Documentation=man:xrdp(8) man:xrdp.ini(5)
|
|
Requires=xrdp-sesman.service
|
|
After=network.target xrdp-sesman.service
|
|
|
|
[Service]
|
|
Type=exec
|
|
EnvironmentFile=-@sysconfdir@/sysconfig/xrdp
|
|
EnvironmentFile=-@sysconfdir@/default/xrdp
|
|
ExecStart=@sbindir@/xrdp $XRDP_OPTIONS --nodaemon
|
|
SystemCallArchitectures=native
|
|
SystemCallFilter=@system-service
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|