22 lines
663 B
Desktop File
22 lines
663 B
Desktop File
[Unit]
|
|
Description=External recording and policy relay for disposable execution VM
|
|
After=network-online.target
|
|
[Service]
|
|
ExecStart=/usr/bin/python3 /opt/decoy/network_capture.py --role broker --quota-mib 2048 --listen 0.0.0.0 --port 19090 --evidence /var/lib/decoy/network --peers /var/lib/decoy/allowed-peers.json
|
|
WorkingDirectory=/opt/decoy
|
|
UMask=0077
|
|
Restart=no
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
ProtectSystem=strict
|
|
ReadWritePaths=/var/lib/decoy
|
|
ProtectHome=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectControlGroups=true
|
|
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
|
MemoryMax=384M
|
|
TasksMax=128
|
|
[Install]
|
|
WantedBy=multi-user.target
|