summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Mair-Keimberger <mmk@levelnine.at>2023-01-21 12:39:19 +0100
committerConrad Kostecki <conikost@gentoo.org>2023-02-01 02:13:21 +0100
commit1ed4f7979633bb9d0a74eb6057ef4e7362180c2f (patch)
treee55ce2d11be223d4f76a4eeae073f4c0086748a3 /www-servers/apache
parentapp-admin/apache-tools: remove unused patch (diff)
downloadgentoo-1ed4f7979633bb9d0a74eb6057ef4e7362180c2f.tar.gz
gentoo-1ed4f7979633bb9d0a74eb6057ef4e7362180c2f.tar.bz2
gentoo-1ed4f7979633bb9d0a74eb6057ef4e7362180c2f.zip
www-servers/apache: remove unused file
Signed-off-by: Michael Mair-Keimberger <mmk@levelnine.at> Closes: https://github.com/gentoo/gentoo/pull/29205 Signed-off-by: Conrad Kostecki <conikost@gentoo.org>
Diffstat (limited to 'www-servers/apache')
-rw-r--r--www-servers/apache/files/apache2.2-hardened.service27
1 files changed, 0 insertions, 27 deletions
diff --git a/www-servers/apache/files/apache2.2-hardened.service b/www-servers/apache/files/apache2.2-hardened.service
deleted file mode 100644
index 7a512a733e72..000000000000
--- a/www-servers/apache/files/apache2.2-hardened.service
+++ /dev/null
@@ -1,27 +0,0 @@
-[Unit]
-Description=The Apache HTTP Server
-After=network.target remote-fs.target nss-lookup.target
-
-[Service]
-EnvironmentFile=/etc/conf.d/apache2
-ExecStart=/usr/sbin/apache2 $APACHE2_OPTS -DFOREGROUND
-ExecReload=/usr/sbin/apache2 $APACHE2_OPTS -k graceful
-ExecStop=/usr/sbin/apache2 $APACHE2_OPTS -k graceful-stop
-# We want systemd to give httpd some time to finish gracefully, but still want
-# it to kill httpd after TimeoutStopSec if something went wrong during the
-# graceful stop. Normally, Systemd sends SIGTERM signal right after the
-# ExecStop, which would kill httpd. We are sending useless SIGCONT here to give
-# httpd time to finish.
-KillSignal=SIGCONT
-PrivateTmp=true
-#Hardening
-PrivateTmp=true
-CapabilityBoundingSet=CAP_CHOWN CAP_SETGID CAP_SETUID CAP_DAC_OVERRIDE CAP_KILL CAP_NET_BIND_SERVICE CAP_IPC_LOCK
-SecureBits=noroot-locked
-ProtectSystem=full
-NoNewPrivileges=true
-PrivateDevices=true
-MemoryDenyWriteExecute=true
-
-[Install]
-WantedBy=multi-user.target