File openiked-keygen.service of Package openiked

[Unit]
Description=OpenIKED key generation
ConditionFileNotEmpty=|!/etc/iked/private/local.key
ConditionFileNotEmpty=|!/etc/iked/local.pub

[Service]
Type=oneshot
ExecStart=/usr/libexec/openiked/openiked-keygen

# added automatically, for details please see
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
ProtectHome=true
PrivateDevices=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
# end of automatic additions

[Install]
WantedBy=openiked-keygen.target