summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFabiano Fidêncio <fidencio@redhat.com>2017-02-05 21:38:57 +0100
committerLukas Slebodnik <lslebodn@redhat.com>2017-03-02 16:51:03 +0100
commite0ca21d9f899c60cc50030c6ae793c48e92b5b7f (patch)
treea0bd40c0261246ea390d62cde97e4a7ec614d0a5
parent9c0c83eecf963416effee67dab55711234373fde (diff)
downloadsssd-e0ca21d9f899c60cc50030c6ae793c48e92b5b7f.tar.gz
sssd-e0ca21d9f899c60cc50030c6ae793c48e92b5b7f.tar.xz
sssd-e0ca21d9f899c60cc50030c6ae793c48e92b5b7f.zip
SYSTEMD: Force responders to refuse manual start
As the responders will either be explicitly started by the monitor or {dbus,socket}-activated, let's force them to refuse manual start, being a little bit restricter on our side. Resolves: https://pagure.io/SSSD/sssd/issue/3300 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com> Reviewed-by: Jakub Hrozek <jhrozek@redhat.com> Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
-rw-r--r--src/sysv/systemd/sssd-autofs.service.in1
-rw-r--r--src/sysv/systemd/sssd-ifp.service.in1
-rw-r--r--src/sysv/systemd/sssd-nss.service.in1
-rw-r--r--src/sysv/systemd/sssd-pac.service.in1
-rw-r--r--src/sysv/systemd/sssd-pam.service.in1
-rw-r--r--src/sysv/systemd/sssd-ssh.service.in1
-rw-r--r--src/sysv/systemd/sssd-sudo.service.in1
7 files changed, 7 insertions, 0 deletions
diff --git a/src/sysv/systemd/sssd-autofs.service.in b/src/sysv/systemd/sssd-autofs.service.in
index 0b988f3d1..32ea6e19c 100644
--- a/src/sysv/systemd/sssd-autofs.service.in
+++ b/src/sysv/systemd/sssd-autofs.service.in
@@ -3,6 +3,7 @@ Description=SSSD AutoFS Service responder
Documentation=man:sssd.conf(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Install]
Also=sssd-autofs.socket
diff --git a/src/sysv/systemd/sssd-ifp.service.in b/src/sysv/systemd/sssd-ifp.service.in
index 8e7abdb0e..57d9237ff 100644
--- a/src/sysv/systemd/sssd-ifp.service.in
+++ b/src/sysv/systemd/sssd-ifp.service.in
@@ -3,6 +3,7 @@ Description=SSSD IFP Service responder
Documentation=man:sssd-ifp(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Service]
Type=dbus
diff --git a/src/sysv/systemd/sssd-nss.service.in b/src/sysv/systemd/sssd-nss.service.in
index 2e6fc79e3..e2f68bc18 100644
--- a/src/sysv/systemd/sssd-nss.service.in
+++ b/src/sysv/systemd/sssd-nss.service.in
@@ -3,6 +3,7 @@ Description=SSSD NSS Service responder
Documentation=man:sssd.conf(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Install]
Also=sssd-nss.socket
diff --git a/src/sysv/systemd/sssd-pac.service.in b/src/sysv/systemd/sssd-pac.service.in
index a921c74cf..ffbfdec03 100644
--- a/src/sysv/systemd/sssd-pac.service.in
+++ b/src/sysv/systemd/sssd-pac.service.in
@@ -3,6 +3,7 @@ Description=SSSD PAC Service responder
Documentation=man:sssd.conf(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Install]
Also=sssd-pac.socket
diff --git a/src/sysv/systemd/sssd-pam.service.in b/src/sysv/systemd/sssd-pam.service.in
index a7f285c8e..6dec46f0c 100644
--- a/src/sysv/systemd/sssd-pam.service.in
+++ b/src/sysv/systemd/sssd-pam.service.in
@@ -3,6 +3,7 @@ Description=SSSD PAM Service responder
Documentation=man:sssd.conf(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Install]
Also=sssd-pam.socket sssd-pam-priv.socket
diff --git a/src/sysv/systemd/sssd-ssh.service.in b/src/sysv/systemd/sssd-ssh.service.in
index 339bdaac6..6f233b485 100644
--- a/src/sysv/systemd/sssd-ssh.service.in
+++ b/src/sysv/systemd/sssd-ssh.service.in
@@ -3,6 +3,7 @@ Description=SSSD SSH Service responder
Documentation=man:sssd.conf(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Install]
Also=sssd-ssh.socket
diff --git a/src/sysv/systemd/sssd-sudo.service.in b/src/sysv/systemd/sssd-sudo.service.in
index 5b736e8b5..b59bcbcd8 100644
--- a/src/sysv/systemd/sssd-sudo.service.in
+++ b/src/sysv/systemd/sssd-sudo.service.in
@@ -3,6 +3,7 @@ Description=SSSD Sudo Service responder
Documentation=man:sssd.conf(5) man:sssd-sudo(5)
After=sssd.service
BindsTo=sssd.service
+RefuseManualStart=true
[Install]
Also=sssd-sudo.socket