Skip to content

Commit e87eb62

Browse files
shanefaganshanefagan
committed
chore: enable resource and IP accounting in systemd service definitions
1 parent 67defee commit e87eb62

2 files changed

Lines changed: 14 additions & 0 deletions

File tree

‎packaging/contextd-rgb.service‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,13 @@ BindReadOnlyPaths=/usr/lib /usr/lib64 /lib /lib64 /etc/ld.so.cache -/etc/context
1515
ProtectHome=read-only
1616
NoNewPrivileges=yes
1717

18+
# Accounting
19+
CPUAccounting=yes
20+
MemoryAccounting=yes
21+
IOAccounting=yes
22+
TasksAccounting=yes
23+
IPAccounting=yes
24+
1825
# Sandboxing & Security
1926
ProtectSystem=strict
2027
ProtectHostname=yes

‎packaging/contextd.service‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,13 @@ CapabilityBoundingSet=CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
1616
AmbientCapabilities=CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
1717
NoNewPrivileges=yes
1818

19+
# Accounting
20+
CPUAccounting=yes
21+
MemoryAccounting=yes
22+
IOAccounting=yes
23+
TasksAccounting=yes
24+
IPAccounting=yes
25+
1926
# Sandboxing & Security
2027
ProtectSystem=strict
2128
ProtectHome=read-only

0 commit comments

Comments
 (0)