Tree - rpms/postfix-mta-sts-resolver

Blob History Raw

		6c16d62	`[Unit]`
		6c16d62	`Description=Provide MTA-STS policy map to Postfix`
		6c16d62	`Documentation=man:mta-sts-daemon(1) man:mta-sts-daemon.yml(5)`
		6c16d62	`Before=postfix.service`
		6c16d62
		6c16d62	`[Service]`
		6c16d62	`Type=notify`
		6c16d62	`ExecStart=/usr/bin/mta-sts-daemon --config /etc/mta-sts-daemon.yml`
		6c16d62	`Restart=on-failure`
		6c16d62
		6c16d62	`User=mta-sts`
		6c16d62	`Group=mta-sts`
		6c16d62
		6c16d62	`AmbientCapabilities=`
		6c16d62	`CapabilityBoundingSet=`
		6c16d62	`DevicePolicy=closed`
		6c16d62	`LockPersonality=yes`
		6c16d62	`MemoryDenyWriteExecute=yes`
		6c16d62	`NoNewPrivileges=yes`
		6c16d62	`PrivateDevices=yes`
		6c16d62	`PrivateTmp=yes`
		6c16d62	`ProtectControlGroups=yes`
		6c16d62	`ProtectHome=yes`
		6c16d62	`ProtectKernelModules=yes`
		6c16d62	`ProtectKernelTunables=yes`
		6c16d62	`ProtectSystem=strict`
		6c16d62	`# sqlite`
		6c16d62	`ReadWritePaths=/var/lib/mta-sts/ -/var/spool/postfix/run/mta-sts`
		6c16d62	`RemoveIPC=yes`
		6c16d62	`# AF_UNIX needed for sd_notify`
		6c16d62	`RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX`
		6c16d62	`RestrictNamespaces=yes`
		6c16d62	`RestrictRealtime=yes`
		6c16d62	`SystemCallArchitectures=native`
		6c16d62	`SystemCallFilter=@basic-io @default @file-system @io-event @ipc @network-io @process @signal @system-service`
		6c16d62	`UMask=0022`
		6c16d62
		6c16d62	`[Install]`
		6c16d62	`WantedBy=multi-user.target`