Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
ModemManager.service	515 B	-rw-r--r--	2023-01-03 12:34
apache2.service	438 B	-rw-r--r--	2026-06-12 05:08
avahi-daemon.service	1.02 KB	-rw-r--r--	2024-12-19 07:01
cron.service	316 B	-rw-r--r--	2022-07-17 08:49
e2scrub_reap.service	553 B	-rw-r--r--	2025-06-06 17:12
google-guest-agent-manager.service	550 B	-rw-r--r--	2026-05-11 20:04
google-guest-compat-manager.service	317 B	-rw-r--r--	2026-05-11 20:04
google-osconfig-agent.service	321 B	-rw-r--r--	2026-04-27 18:08
google-shutdown-scripts.service	419 B	-rw-r--r--	2026-05-11 20:04
google-startup-scripts.service	468 B	-rw-r--r--	2026-05-11 20:04
memcached.service	3.13 KB	-rw-r--r--	2023-01-12 00:02
networkd-dispatcher.service	370 B	-rw-r--r--	2023-01-20 15:34
nfs-client.target	433 B	-rw-r--r--	2024-12-11 14:00
nfs-server.service	915 B	-rw-r--r--	2024-12-11 14:00
php7.2-fpm.service	766 B	-rw-r--r--	2026-05-14 15:46
php7.4-fpm.service	766 B	-rw-r--r--	2026-05-14 15:45
php8.1-fpm.service	766 B	-rw-r--r--	2026-05-14 15:46
php8.4-fpm.service	766 B	-rw-r--r--	2026-06-06 06:52
remote-fs.target	530 B	-rw-r--r--	2025-06-26 14:56
rpcbind.service	626 B	-rw-r--r--	2022-07-27 09:20
rsyslog.service	469 B	-rw-r--r--	2025-01-08 18:13
ssh.service	538 B	-rw-r--r--	2026-05-05 10:26
systemd-networkd.service	2.39 KB	-rw-r--r--	2026-04-27 19:48
unattended-upgrades.service	377 B	-rw-r--r--	2022-12-31 20:59
wpa_supplicant.service	432 B	-rw-r--r--	2025-04-11 14:29

Rename

# It's not recommended to modify this file in-place, because it will be
# overwritten during upgrades.  If you want to customize, the best
# way is to use the "systemctl edit" command to create an override unit.
#
# For example, to pass additional options, create an override unit
# (as is done by systemctl edit) and enter the following:
#
#     [Service]
#     Environment=OPTIONS="-l 127.0.0.1,::1"

[Unit]
Description=memcached daemon
After=network.target
Documentation=man:memcached(1)

[Service]
ExecStart=/usr/share/memcached/scripts/systemd-memcached-wrapper /etc/memcached.conf

# Set up a new file system namespace and mounts private /tmp and /var/tmp
# directories so this service cannot access the global directories and
# other processes cannot access this service's directories.
PrivateTmp=true

# Mounts the /usr, /boot, and /etc directories read-only for processes
# invoked by this unit.
ProtectSystem=full

# Ensures that the service process and all its children can never gain new
# privileges
NoNewPrivileges=true

# Sets up a new /dev namespace for the executed processes and only adds API
# pseudo devices such as /dev/null, /dev/zero or /dev/random (as well as
# the pseudo TTY subsystem) to it, but no physical devices such as /dev/sda.
PrivateDevices=true

# Required for dropping privileges and running as a different user
CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE

# Restricts the set of socket address families accessible to the processes
# of this unit. Protects against vulnerabilities such as CVE-2016-8655
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX

# Attempts to create memory mappings that are writable and executable at
# the same time, or to change existing memory mappings to become executable
# are prohibited.
MemoryDenyWriteExecute=true

# Explicit module loading will be denied. This allows to turn off module
# load and unload operations on modular kernels. It is recommended to turn
# this on for most services that do not need special file systems or extra
# kernel modules to work.
ProtectKernelModules=true

# Kernel variables accessible through /proc/sys, /sys, /proc/sysrq-trigger,
# /proc/latency_stats, /proc/acpi, /proc/timer_stats, /proc/fs and /proc/irq
# will be made read-only to all processes of the unit. Usually, tunable
# kernel variables should only be written at boot-time, with the sysctl.d(5)
# mechanism. Almost no services need to write to these at runtime; it is hence
# recommended to turn this on for most services.
ProtectKernelTunables=true

# The Linux Control Groups (cgroups(7)) hierarchies accessible through
# /sys/fs/cgroup will be made read-only to all processes of the unit.
# Except for container managers no services should require write access
# to the control groups hierarchies; it is hence recommended to turn this
# on for most services
ProtectControlGroups=true

# Any attempts to enable realtime scheduling in a process of the unit are
# refused.
RestrictRealtime=true

# Takes away the ability to create or manage any kind of namespace
RestrictNamespaces=true

PIDFile=/run/memcached/memcached.pid

# try to restart if errors encountered
Restart=always

[Install]
WantedBy=multi-user.target