X-Git-Url: https://arthur.barton.de/gitweb/?a=blobdiff_plain;f=system%2Fnetdata.service.in;h=e260e2738038e7396df07bcb601a26772e86d815;hb=74a6727974953d40db73d2e78630de08c49bfc19;hp=afdf0d78ce3c24422bd116c1f650ba32e47b8383;hpb=b69723411bc73bbee640a760fa2267ec29f4d69e;p=netdata.git

diff --git a/system/netdata.service.in b/system/netdata.service.in
index afdf0d78..e260e273 100644
--- a/system/netdata.service.in
+++ b/system/netdata.service.in
@@ -4,41 +4,12 @@ After=network.target httpd.service squid.service nfs-server.service mysqld.servi
 
 [Service]
 Type=simple
-WorkingDirectory=/tmp
 User=netdata
 Group=netdata
-RuntimeDirectory=netdata
-ExecStartPre=/bin/mkdir -p @localstatedir_POST@/run/netdata
-ExecStartPre=/bin/chown -R netdata:netdata @localstatedir_POST@/run/netdata
-ExecStartPre=/bin/chmod 0775 @localstatedir_POST@/run/netdata
-ExecStart=@sbindir_POST@/netdata -D -P @localstatedir_POST@/run/netdata/netdata.pid
-
-# -----------------------------------------------------------------------------
-# Stopping netdata
-
-KillMode=mixed
-KillSignal=SIGTERM
+ExecStart=@sbindir_POST@/netdata -D
 
 # saving a big db on slow disks may need some time
 TimeoutStopSec=60
 
-# and disable SIGKILL - if sent during save, we will loose the db
-SendSIGKILL=no
-
-# -----------------------------------------------------------------------------
-# Hardening netdata
-
-AmbientCapabilities=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE
-CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_SYS_PTRACE
-PrivateTmp=true
-ProtectSystem=full
-ProtectHome=read-only
-
-# is implicitly set by the MemoryDenyWriteExecute=true
-# NoNewPrivileges=true
-
-# Do not enable - it makes node.js plugins to crash
-# MemoryDenyWriteExecute=true
-
 [Install]
 WantedBy=multi-user.target