INN commit: branches/2.6/contrib (sample.init.systemd)

INN Commit rra at
Tue Dec 1 21:08:53 UTC 2020

    Date: Tuesday, December 1, 2020 @ 13:08:53
  Author: iulius
Revision: 10433

Improve sample init systemd service unit

Apply more protections.
Sample shared by Russ Allbery.


 sample.init.systemd |   32 +++++++++++++++++++++++---------
 1 file changed, 23 insertions(+), 9 deletions(-)

Modified: sample.init.systemd
--- sample.init.systemd	2020-11-30 21:51:10 UTC (rev 10432)
+++ sample.init.systemd	2020-12-01 21:08:53 UTC (rev 10433)
@@ -3,20 +3,34 @@
 # This is a simple, bare-bones example of a systemd-style init script for INN.
-Description=InterNetNews Daemon
+Description=InterNetNews News Server
+ExecReload=/usr/sbin/ctlinnd -t 20 reload '' 'systemd unit reload'
+ExecStop=/bin/su -m news -s /bin/sh -c '/usr/lib/news/bin/ stop'
-ExecReload=/usr/libexec/news/ctlinnd -t 20 reload '' 'reload asked'
-ExecStop=/bin/su -m news -s /bin/sh -c '/usr/libexec/news/ stop'
+# Setting NoNewPrivileges will break most local sendmail implementations
+# because they're setuid or setgid to drop off mail in the mail queue.  With
+# this configuration, one can use mSMTP as the configured mta, set to forward
+# mail via SMTP to localhost.  Nevertheless, one can probably do better than
+# this by adding some syscall filtering.

More information about the inn-committers mailing list