[Unit] Description=status agent After=network.target [Service] Type=simple User=status Group=status ExecStart=/usr/bin/status Restart=on-failure RestartSec=10 EnvironmentFile=/etc/sysconfig/status-agent # Hardening NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true [Install] WantedBy=multi-user.target