Hi!<br><br>I've defined a new redis-service:<br>
Code:
[Unit]<div>Description=Advanced key-value store</div><div>After=network.target</div><div>Documentation=http://redis.io/documentation, man:redis-server(1)</div><div><br></div><div>[Service]</div><div>Type=forking</div><div>ExecStart=/usr/bin/redis-server /etc/redis/redis-openvas.conf</div><div>PIDFile=/run/redis/redis-server-openvas.pid</div><div>TimeoutStopSec=0</div><div>Restart=always</div><div>User=redis</div><div>Group=redis</div><div>RuntimeDirectory=redis</div><div>RuntimeDirectoryMode=2755</div><div><br></div><div>UMask=007</div><div>PrivateTmp=yes</div><div>LimitNOFILE=65535</div><div>PrivateDevices=yes</div><div>ProtectHome=yes</div><div>ReadOnlyDirectories=/</div><div>ReadWritePaths=-/var/lib/redis</div><div>ReadWritePaths=-/var/log/redis</div><div>ReadWritePaths=-/var/run/redis</div><div><br></div><div>NoNewPrivileges=true</div><div>CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE</div><div>MemoryDenyWriteExecute=true</div><div>ProtectKernelModules=true</div><div>ProtectKernelTunables=true</div><div>ProtectControlGroups=true</div><div>RestrictRealtime=true</div><div>RestrictNamespaces=true</div><div>RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX</div><div><br></div><div># redis-server can write to its own config file when in cluster mode so we</div><div># permit writing there by default. If you are not using this feature, it is</div><div># recommended that you replace the following lines with "ProtectSystem=full".</div><div>ProtectSystem=true</div><div>ReadWriteDirectories=-/etc/redis</div><div><div><br></div><div>[Install]</div><div>WantedBy=multi-user.target</div><div>Alias=redis-openvas.service</div><div>
</div></div><br>The Service I derived this from:<br>
Code:
[Unit]<div>Description=Advanced key-value store</div><div>After=network.target</div><div>Documentation=http://redis.io/documentation, man:redis-server(1)</div><div><br></div><div>[Service]</div><div>Type=forking</div><div>ExecStart=/usr/bin/redis-server /etc/redis/redis.conf</div><div>PIDFile=/run/redis/redis-server.pid</div><div>TimeoutStopSec=0</div><div>Restart=always</div><div>User=redis</div><div>Group=redis</div><div>RuntimeDirectory=redis</div><div>RuntimeDirectoryMode=2755</div><div><br></div><div>UMask=007</div><div>PrivateTmp=yes</div><div>LimitNOFILE=65535</div><div>PrivateDevices=yes</div><div>ProtectHome=yes</div><div>ReadOnlyDirectories=/</div><div>ReadWritePaths=-/var/lib/redis</div><div>ReadWritePaths=-/var/log/redis</div><div>ReadWritePaths=-/var/run/redis</div><div><br></div><div>NoNewPrivileges=true</div><div>CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE</div><div>MemoryDenyWriteExecute=true</div><div>ProtectKernelModules=true</div><div>ProtectKernelTunables=true</div><div>ProtectControlGroups=true</div><div>RestrictRealtime=true</div><div>RestrictNamespaces=true</div><div>RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX</div><div><br></div><div># redis-server can write to its own config file when in cluster mode so we</div><div># permit writing there by default. If you are not using this feature, it is</div><div># recommended that you replace the following lines with "ProtectSystem=full".</div><div>ProtectSystem=true</div><div>ReadWriteDirectories=-/etc/redis<br><br></div><div><div>[Install]</div><div>WantedBy=multi-user.target</div><div>Alias=redis.service</div><div>
</div></div><br>Any idea why one starts and the other waits for
Code:
systemd-tty-ask-password-agent
<br>
Code:
root&nbsp; &nbsp; &nbsp; &nbsp;810&nbsp; 0.0&nbsp; 0.2&nbsp; &nbsp;4444&nbsp; 2356 pts/1&nbsp; &nbsp; Ss&nbsp; &nbsp;08:28&nbsp; &nbsp;0:00&nbsp; \_ -bash<div>root&nbsp; &nbsp; &nbsp; &nbsp;846&nbsp; 0.2&nbsp; 0.1&nbsp; &nbsp;6136&nbsp; 1056 pts/1&nbsp; &nbsp; S+&nbsp; &nbsp;08:31&nbsp; &nbsp;0:00&nbsp; |&nbsp; &nbsp;\_ systemctl start redis-server-openvas</div><div>root&nbsp; &nbsp; &nbsp; &nbsp;847&nbsp; 0.5&nbsp; 0.2&nbsp; 11416&nbsp; 2584 pts/1&nbsp; &nbsp; S+&nbsp; &nbsp;08:31&nbsp; &nbsp;0:00&nbsp; |&nbsp; &nbsp; &nbsp; &nbsp;\_ /bin/systemd-tty-ask-password-agent --watch
</div>