X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/f06628a80acfba8c201da23162681647d5b66d59..50aea11082eaa90bd37593b9c987d38a082f4e1b:/cookbooks/systemd/resources/service.rb diff --git a/cookbooks/systemd/resources/service.rb b/cookbooks/systemd/resources/service.rb index 728009c3f..11ca0e28c 100644 --- a/cookbooks/systemd/resources/service.rb +++ b/cookbooks/systemd/resources/service.rb @@ -45,6 +45,7 @@ property :user, String property :group, String property :dynamic_user, [true, false] property :working_directory, String +property :umask, String property :exec_start_pre, [String, Array] property :exec_start, [String, Array] property :exec_start_post, [String, Array] @@ -54,6 +55,7 @@ property :exec_reload, String property :runtime_max_sec, Integer property :runtime_directory, String property :runtime_directory_mode, Integer +property :runtime_directory_preserve, [true, false, String] property :state_directory, String property :state_directory_mode, Integer property :cache_directory, String @@ -71,10 +73,13 @@ property :standard_error, String, property :success_exit_status, [Integer, String, Array] property :restart, String, :is => %w[on-success on-failure on-abnormal on-watchdog on-abort always] +property :restart_sec, [Integer, String] property :protect_proc, String, :is => %w[noaccess invisible ptraceable default] property :proc_subset, String, :is => %w[all pid] +property :bind_paths, [String, Array] +property :bind_read_only_paths, [String, Array] property :capability_bounding_set, [String, Array] property :ambient_capabilities, [String, Array] property :no_new_privileges, [true, false] @@ -101,6 +106,7 @@ property :memory_deny_write_execute, [true, false] property :restrict_realtime, [true, false] property :restrict_suid_sgid, [true, false] property :remove_ipc, [true, false] +property :stop_when_unneeded, [true, false] property :system_call_filter, [String, Array] property :system_call_architectures, [String, Array] property :tasks_max, Integer