added my Recipes
This commit is contained in:
@@ -0,0 +1 @@
|
||||
SUBSYSTEM=="misc", KERNEL=="hw_random", TAG+="systemd", ENV{SYSTEMD_WANTS}+="hwrng.device"
|
||||
@@ -0,0 +1,35 @@
|
||||
[Unit]
|
||||
Description=Hardware RNG Entropy Gatherer Daemon
|
||||
DefaultDependencies=no
|
||||
Conflicts=shutdown.target
|
||||
Before=sysinit.target shutdown.target
|
||||
ConditionVirtualization=!container
|
||||
Wants=dev-hwrng.device
|
||||
After=dev-hwrng.device
|
||||
After=systemd-udevd.service
|
||||
|
||||
[Service]
|
||||
EnvironmentFile=-/etc/default/rng-tools
|
||||
ExecStart=/usr/sbin/rngd -f $EXTRA_ARGS
|
||||
CapabilityBoundingSet=CAP_SYS_ADMIN
|
||||
IPAddressDeny=any
|
||||
LockPersonality=yes
|
||||
MemoryDenyWriteExecute=yes
|
||||
NoNewPrivileges=yes
|
||||
PrivateTmp=yes
|
||||
ProtectControlGroups=yes
|
||||
ProtectHome=yes
|
||||
ProtectHostname=yes
|
||||
ProtectKernelModules=yes
|
||||
ProtectKernelLogs=yes
|
||||
ProtectSystem=strict
|
||||
RestrictAddressFamilies=AF_UNIX
|
||||
RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
SystemCallArchitectures=native
|
||||
SystemCallErrorNumber=EPERM
|
||||
SystemCallFilter=@system-service
|
||||
|
||||
[Install]
|
||||
WantedBy=sysinit.target
|
||||
@@ -0,0 +1,14 @@
|
||||
FILESEXTRAPATHS:prepend := "${THISDIR}/${PN}:"
|
||||
|
||||
PACKAGECONFIG:remove = "libjitterentropy"
|
||||
|
||||
SRC_URI += " \
|
||||
file://71-hwrng.rules \
|
||||
file://rng-tools.service \
|
||||
"
|
||||
|
||||
do_install:append() {
|
||||
# install udev rule
|
||||
install -D -p -m0644 ${WORKDIR}/71-hwrng.rules ${D}${sysconfdir}/udev/rules.d/71-hwrng.rules
|
||||
}
|
||||
FILES:${PN}-service += "${sysconfdir}/udev"
|
||||
Reference in New Issue
Block a user