summarylogtreecommitdiffstats
path: root/nethogs.service
diff options
context:
space:
mode:
Diffstat (limited to 'nethogs.service')
-rw-r--r--nethogs.service24
1 files changed, 24 insertions, 0 deletions
diff --git a/nethogs.service b/nethogs.service
new file mode 100644
index 00000000000..dbc07459fb7
--- /dev/null
+++ b/nethogs.service
@@ -0,0 +1,24 @@
+[Unit]
+Description=nethogs tracemode service
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+ExecStart=/usr/bin/nethogst
+
+# Hardening
+ProtectSystem=strict
+ReadWritePaths=/var/lib
+StateDirectory=nethogs
+PrivateDevices=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectKernelModules=yes
+PrivateTmp=yes
+MemoryDenyWriteExecute=yes
+RestrictRealtime=yes
+RestrictNamespaces=yes
+
+[Install]
+WantedBy=multi-user.target