From ce945236dacb3fcedbd570d50a7212ce068f07aa Mon Sep 17 00:00:00 2001 From: xuans Date: Tue, 22 Sep 2026 11:29:05 +0800 Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E6=AD=A3=E7=AE=A1=E7=90=86=E5=91=98?= =?UTF-8?q?=E6=81=A2=E5=A4=8D=E5=8D=95=E5=85=83=E8=B6=85=E6=97=B6=E9=85=8D?= =?UTF-8?q?=E7=BD=AE?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- backend/internal/admin/server_test.go | 4 +++- deploy/systemd/Scert-admin.service | 3 +-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/backend/internal/admin/server_test.go b/backend/internal/admin/server_test.go index 8480e10..a4ec095 100644 --- a/backend/internal/admin/server_test.go +++ b/backend/internal/admin/server_test.go @@ -27,7 +27,8 @@ func TestScertAdminSystemdUnitKeepsManualOnlyPolicy(t *testing.T) { "RuntimeDirectoryMode=0700", "ExecStart=/scert/scert-admin", "Restart=no", - "RuntimeMaxSec=130s", + "TimeoutStartSec=130s", + "TimeoutStopSec=5s", "Type=oneshot", "Requisite=Scert.service", "KillMode=mixed", @@ -47,6 +48,7 @@ func TestScertAdminSystemdUnitKeepsManualOnlyPolicy(t *testing.T) { "Restart=always", "Restart=on-failure", "ExecReload=", + "RuntimeMaxSec=", "AF_INET", "AF_INET6", } { diff --git a/deploy/systemd/Scert-admin.service b/deploy/systemd/Scert-admin.service index 3bd7f3a..ee49778 100644 --- a/deploy/systemd/Scert-admin.service +++ b/deploy/systemd/Scert-admin.service @@ -19,7 +19,6 @@ TimeoutStartSec=130s TimeoutStopSec=5s KillMode=mixed Restart=no -RuntimeMaxSec=130s UMask=0077 NoNewPrivileges=yes CapabilityBoundingSet=CAP_SYS_PTRACE CAP_DAC_OVERRIDE @@ -52,4 +51,4 @@ RestrictAddressFamilies=AF_UNIX # 当前实现通过本机 Socket 交互,不再维护旧注释中描述的 Web 重置入口。 # 管理程序使用 root 读取显式启动者的终端;只保留终端访问及本机 Socket 所需能力。 -# 新密码和验证码只在调用终端输入,不写入文件、命令参数或服务日志。 \ No newline at end of file +# 新密码和验证码只在调用终端输入,不写入文件、命令参数或服务日志。