diff options
author | Fabiano Fidêncio <fidencio@redhat.com> | 2017-02-05 21:38:57 +0100 |
---|---|---|
committer | Lukas Slebodnik <lslebodn@redhat.com> | 2017-03-02 16:51:03 +0100 |
commit | e0ca21d9f899c60cc50030c6ae793c48e92b5b7f (patch) | |
tree | a0bd40c0261246ea390d62cde97e4a7ec614d0a5 | |
parent | 9c0c83eecf963416effee67dab55711234373fde (diff) | |
download | sssd-e0ca21d9f899c60cc50030c6ae793c48e92b5b7f.tar.gz sssd-e0ca21d9f899c60cc50030c6ae793c48e92b5b7f.tar.xz sssd-e0ca21d9f899c60cc50030c6ae793c48e92b5b7f.zip |
SYSTEMD: Force responders to refuse manual start
As the responders will either be explicitly started by the monitor or
{dbus,socket}-activated, let's force them to refuse manual start, being
a little bit restricter on our side.
Resolves:
https://pagure.io/SSSD/sssd/issue/3300
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
-rw-r--r-- | src/sysv/systemd/sssd-autofs.service.in | 1 | ||||
-rw-r--r-- | src/sysv/systemd/sssd-ifp.service.in | 1 | ||||
-rw-r--r-- | src/sysv/systemd/sssd-nss.service.in | 1 | ||||
-rw-r--r-- | src/sysv/systemd/sssd-pac.service.in | 1 | ||||
-rw-r--r-- | src/sysv/systemd/sssd-pam.service.in | 1 | ||||
-rw-r--r-- | src/sysv/systemd/sssd-ssh.service.in | 1 | ||||
-rw-r--r-- | src/sysv/systemd/sssd-sudo.service.in | 1 |
7 files changed, 7 insertions, 0 deletions
diff --git a/src/sysv/systemd/sssd-autofs.service.in b/src/sysv/systemd/sssd-autofs.service.in index 0b988f3d1..32ea6e19c 100644 --- a/src/sysv/systemd/sssd-autofs.service.in +++ b/src/sysv/systemd/sssd-autofs.service.in @@ -3,6 +3,7 @@ Description=SSSD AutoFS Service responder Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Install] Also=sssd-autofs.socket diff --git a/src/sysv/systemd/sssd-ifp.service.in b/src/sysv/systemd/sssd-ifp.service.in index 8e7abdb0e..57d9237ff 100644 --- a/src/sysv/systemd/sssd-ifp.service.in +++ b/src/sysv/systemd/sssd-ifp.service.in @@ -3,6 +3,7 @@ Description=SSSD IFP Service responder Documentation=man:sssd-ifp(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Service] Type=dbus diff --git a/src/sysv/systemd/sssd-nss.service.in b/src/sysv/systemd/sssd-nss.service.in index 2e6fc79e3..e2f68bc18 100644 --- a/src/sysv/systemd/sssd-nss.service.in +++ b/src/sysv/systemd/sssd-nss.service.in @@ -3,6 +3,7 @@ Description=SSSD NSS Service responder Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Install] Also=sssd-nss.socket diff --git a/src/sysv/systemd/sssd-pac.service.in b/src/sysv/systemd/sssd-pac.service.in index a921c74cf..ffbfdec03 100644 --- a/src/sysv/systemd/sssd-pac.service.in +++ b/src/sysv/systemd/sssd-pac.service.in @@ -3,6 +3,7 @@ Description=SSSD PAC Service responder Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Install] Also=sssd-pac.socket diff --git a/src/sysv/systemd/sssd-pam.service.in b/src/sysv/systemd/sssd-pam.service.in index a7f285c8e..6dec46f0c 100644 --- a/src/sysv/systemd/sssd-pam.service.in +++ b/src/sysv/systemd/sssd-pam.service.in @@ -3,6 +3,7 @@ Description=SSSD PAM Service responder Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Install] Also=sssd-pam.socket sssd-pam-priv.socket diff --git a/src/sysv/systemd/sssd-ssh.service.in b/src/sysv/systemd/sssd-ssh.service.in index 339bdaac6..6f233b485 100644 --- a/src/sysv/systemd/sssd-ssh.service.in +++ b/src/sysv/systemd/sssd-ssh.service.in @@ -3,6 +3,7 @@ Description=SSSD SSH Service responder Documentation=man:sssd.conf(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Install] Also=sssd-ssh.socket diff --git a/src/sysv/systemd/sssd-sudo.service.in b/src/sysv/systemd/sssd-sudo.service.in index 5b736e8b5..b59bcbcd8 100644 --- a/src/sysv/systemd/sssd-sudo.service.in +++ b/src/sysv/systemd/sssd-sudo.service.in @@ -3,6 +3,7 @@ Description=SSSD Sudo Service responder Documentation=man:sssd.conf(5) man:sssd-sudo(5) After=sssd.service BindsTo=sssd.service +RefuseManualStart=true [Install] Also=sssd-sudo.socket |