Systemd File for SAVDID

RE: Systemd File for SAVDID

Henry Miller — Sun, 15 Jul 2018 12:38:06 GMT

The systemd unit file below works for me on RHEL 7.

/etc/systemd/system/savdid.service:

[Unit]
Description=Sophos SAV Dynamic Interface Daemon
After=network.target

[Service]
Type=forking
PIDFile=/var/run/savdid.pid
ExecStart=/usr/local/bin/savdid -d -c /etc/savdid.conf -f /var/run/savdid.pid -s
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
PrivateTmp=true
ProtectSystem=full
ProtectHome=true

[Install]
WantedBy=multi-user.target

Savdid does not start if there is an unprivileged user/group enforcement in systemd unit file itself, however it does start if unprivileged user/group is configured in savdid.conf instead.

RE: Systemd File for SAVDID

Gowtham Mani — Mon, 07 May 2018 08:23:15 GMT

Hi Hans Wurst,

Can you please let us know what is that you are trying to achieve?

RE: Systemd File for SAVDID

IsmailJaweed — Mon, 07 May 2018 08:03:56 GMT

Just curios about the purpose of this file.

I don't see what it "wants" to capture. If nothing. are you trying to create for savdi itself ?

Not sure if this works for you however, it is a general template as seen below

Try adding User, Group and Wants

[Unit]
Description=SAV Dynamic Interface (SAVDI) is an interface between Amavis and Sophos Anti-Virus for Linux.
After=network.target
Wants= //service name

[Service]
Type=forking
User= // User Name
Group= //Group Name
PIDFile=/var/run/sophos/savdi.pid
ExecStart=/usr/local/bin/savdid -d -c /usr/local/savdi/savdid.conf
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
PrivateTmp=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target