PNG  IHDR;IDATxܻn0K )(pA 7LeG{ §㻢|ذaÆ 6lذaÆ 6lذaÆ 6lom$^yذag5bÆ 6lذaÆ 6lذa{ 6lذaÆ `}HFkm,mӪôô! x|'ܢ˟;E:9&ᶒ}{v]n&6 h_tڠ͵-ҫZ;Z$.Pkž)!o>}leQfJTu іچ\X=8Rن4`Vwl>nG^is"ms$ui?wbs[m6K4O.4%/bC%t Mז -lG6mrz2s%9s@-k9=)kB5\+͂Zsٲ Rn~GRC wIcIn7jJhۛNCS|j08yiHKֶۛkɈ+;SzL/F*\Ԕ#"5m2[S=gnaPeғL lذaÆ 6l^ḵaÆ 6lذaÆ 6lذa; _ذaÆ 6lذaÆ 6lذaÆ RIENDB` [Unit] Description=Checkmk agent controller daemon After=network.target Documentation=https://docs.checkmk.com/latest/en/agent_linux.html [Service] ExecStart=/usr/bin/cmk-agent-ctl daemon Type=simple Restart=on-failure UMask=0077 User=cmk-agent NoNewPrivileges=yes # added v184 CapabilityBoundingSet= # added v211 RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX # added v214 ProtectHome=yes ProtectSystem=full # added v231 RestrictRealtime=yes # added v232 ProtectControlGroups=yes ProtectKernelModules=yes ProtectKernelTunables=yes RemoveIPC=yes # added v235 LockPersonality=yes # added v242 RestrictSUIDSGID=yes # added v244 ProtectKernelLogs=yes # added v245 ProtectClock=yes # added v239 PrivateMounts=yes # added v242 ProtectHostname=yes [Install] WantedBy=multi-user.target