grsecurity module: fix grsec-lock unit ordering

Requirement without ordering implies parallel execution; it is crucial
that sysctl tunables are finalized before the lock is engaged, however.
This commit is contained in:
Joachim Fasting 2016-05-02 07:30:44 +02:00
parent 39db90eaf6
commit 60a27781d6
No known key found for this signature in database
GPG key ID: 4330820E1E04DCF4

View file

@ -234,7 +234,8 @@ in
systemd.services.grsec-lock = mkIf cfg.config.sysctl {
description = "grsecurity sysctl-lock Service";
requires = [ "systemd-sysctl.service" ];
wants = [ "systemd-sysctl.service" ];
after = [ "systemd-sysctl.service" ];
wantedBy = [ "multi-user.target" ];
serviceConfig.Type = "oneshot";
serviceConfig.RemainAfterExit = "yes";