admin / Synapse-Sonar

public

Attack Surface Simulation

Code Issues Pull requests Pipelines Packages Security Insights Wiki Settings

Synapse-Sonar / synapse-sonar / public / agents / sensor / sonar-sensor.service 524 B · main

[Unit]
Description=Synapse Sonar passive sensor (agentless flow monitor)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
EnvironmentFile=/etc/sonar-sensor/sonar-sensor.env
ExecStart=/usr/bin/python3 /opt/sonar-sensor/sonar-sensor.py
Restart=always
RestartSec=10
# Grant only packet-capture capabilities instead of full root.
DynamicUser=yes
AmbientCapabilities=CAP_NET_RAW CAP_NET_ADMIN
CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN
NoNewPrivileges=yes

[Install]
WantedBy=multi-user.target