From e0ca21d9f899c60cc50030c6ae793c48e92b5b7f Mon Sep 17 00:00:00 2001
From: Fabiano Fidêncio <fidencio@redhat.com>
Date: Sun, 5 Feb 2017 21:38:57 +0100
Subject: SYSTEMD: Force responders to refuse manual start
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

As the responders will either be explicitly started by the monitor or
{dbus,socket}-activated, let's force them to refuse manual start, being
a little bit restricter on our side.

Resolves:
https://pagure.io/SSSD/sssd/issue/3300

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>

Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
Reviewed-by: Lukáš Slebodník <lslebodn@redhat.com>
---
 src/sysv/systemd/sssd-autofs.service.in | 1 +
 src/sysv/systemd/sssd-ifp.service.in    | 1 +
 src/sysv/systemd/sssd-nss.service.in    | 1 +
 src/sysv/systemd/sssd-pac.service.in    | 1 +
 src/sysv/systemd/sssd-pam.service.in    | 1 +
 src/sysv/systemd/sssd-ssh.service.in    | 1 +
 src/sysv/systemd/sssd-sudo.service.in   | 1 +
 7 files changed, 7 insertions(+)

diff --git a/src/sysv/systemd/sssd-autofs.service.in b/src/sysv/systemd/sssd-autofs.service.in
index 0b988f3d1..32ea6e19c 100644
--- a/src/sysv/systemd/sssd-autofs.service.in
+++ b/src/sysv/systemd/sssd-autofs.service.in
@@ -3,6 +3,7 @@ Description=SSSD AutoFS Service responder
 Documentation=man:sssd.conf(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Install]
 Also=sssd-autofs.socket
diff --git a/src/sysv/systemd/sssd-ifp.service.in b/src/sysv/systemd/sssd-ifp.service.in
index 8e7abdb0e..57d9237ff 100644
--- a/src/sysv/systemd/sssd-ifp.service.in
+++ b/src/sysv/systemd/sssd-ifp.service.in
@@ -3,6 +3,7 @@ Description=SSSD IFP Service responder
 Documentation=man:sssd-ifp(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Service]
 Type=dbus
diff --git a/src/sysv/systemd/sssd-nss.service.in b/src/sysv/systemd/sssd-nss.service.in
index 2e6fc79e3..e2f68bc18 100644
--- a/src/sysv/systemd/sssd-nss.service.in
+++ b/src/sysv/systemd/sssd-nss.service.in
@@ -3,6 +3,7 @@ Description=SSSD NSS Service responder
 Documentation=man:sssd.conf(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Install]
 Also=sssd-nss.socket
diff --git a/src/sysv/systemd/sssd-pac.service.in b/src/sysv/systemd/sssd-pac.service.in
index a921c74cf..ffbfdec03 100644
--- a/src/sysv/systemd/sssd-pac.service.in
+++ b/src/sysv/systemd/sssd-pac.service.in
@@ -3,6 +3,7 @@ Description=SSSD PAC Service responder
 Documentation=man:sssd.conf(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Install]
 Also=sssd-pac.socket
diff --git a/src/sysv/systemd/sssd-pam.service.in b/src/sysv/systemd/sssd-pam.service.in
index a7f285c8e..6dec46f0c 100644
--- a/src/sysv/systemd/sssd-pam.service.in
+++ b/src/sysv/systemd/sssd-pam.service.in
@@ -3,6 +3,7 @@ Description=SSSD PAM Service responder
 Documentation=man:sssd.conf(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Install]
 Also=sssd-pam.socket sssd-pam-priv.socket
diff --git a/src/sysv/systemd/sssd-ssh.service.in b/src/sysv/systemd/sssd-ssh.service.in
index 339bdaac6..6f233b485 100644
--- a/src/sysv/systemd/sssd-ssh.service.in
+++ b/src/sysv/systemd/sssd-ssh.service.in
@@ -3,6 +3,7 @@ Description=SSSD SSH Service responder
 Documentation=man:sssd.conf(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Install]
 Also=sssd-ssh.socket
diff --git a/src/sysv/systemd/sssd-sudo.service.in b/src/sysv/systemd/sssd-sudo.service.in
index 5b736e8b5..b59bcbcd8 100644
--- a/src/sysv/systemd/sssd-sudo.service.in
+++ b/src/sysv/systemd/sssd-sudo.service.in
@@ -3,6 +3,7 @@ Description=SSSD Sudo Service responder
 Documentation=man:sssd.conf(5) man:sssd-sudo(5)
 After=sssd.service
 BindsTo=sssd.service
+RefuseManualStart=true
 
 [Install]
 Also=sssd-sudo.socket
-- 
cgit