Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-07-27 00:47:20 +02:00
Code Issues Projects Releases Wiki Activity

socket.d: introduce {freebind,upheld}.conf

Browse Source
This commit is contained in:
Aminda Suomalainen 2025-07-19 12:07:05 +03:00
parent 4701d2be6c
commit 26636a5519
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723
3 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/systemd/system/socket.d/freebind.conf Normal file
View File

@ -0,0 +1,2 @@
[Socket]
FreeBind=true

3
etc/systemd/system/socket.d/upheld.conf Normal file
View File

@ -0,0 +1,3 @@
# https://github.com/systemd/systemd/issues/11553#issuecomment-1700933643
[Install]
UpheldBy=sockets.target

9
install
View File

@ -174,7 +174,7 @@ if [ "$(id -u)" == "0" ]; then
mkdir -vp /etc/systemd/system/{ssh,sshd,oidentd}.socket.d/
# SECURITY WARNING!
cp -v etc/systemd/system/service.d/rngd-wanted.conf /etc/systemd/system/service.d/
cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/socket.d/
cp -v etc/systemd/system/socket.d/{dualstack-bind,freebind,upheld}.conf /etc/systemd/system/socket.d/
# SECURITY WARNING!
cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/ssh.service.d/
cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/sshd.service.d/
@ -187,9 +187,10 @@ if [ "$(id -u)" == "0" ]; then
cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/unbound.service.d/
cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/tor.service.d/
cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/yggdrasil.service.d/
cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/ssh.socket.d/
cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/sshd.socket.d/
cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/oidentd.socket.d/
#cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/ssh.socket.d/
#cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/sshd.socket.d/
#cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/oidentd.socket.d/
rm -v /etc/systemd/system/*.socket.d/dualstack-bind.conf
if hash systemctl 2> /dev/null; then
systemctl daemon-reload