File haveged-once.service of Package haveged.37149
[Unit]
Description=Entropy Daemon based on the HAVEGE algorithm
Documentation=man:haveged(8) http://www.issihosts.com/haveged/
ConditionVirtualization=!container
[Service]
Type=oneshot
ExecStart=/usr/sbin/haveged -w 1024 -v 1 -F --once
SuccessExitStatus=137 143
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SYS_CHROOT
PrivateNetwork=yes
SecureBits=noroot-locked
# Don't set PrivateTmp=true as it can cause an ordering cycle
PrivateTmp=false
# added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions