Adding Dependencies to systemd Unit Configuration Files

If your system supports systemd (see Linux Distributions that Support CTE and systemd), before you can safely reboot your protected host or use the files in the GuardPoint, you must perform the following steps to set the proper CTE dependencies for your applications.

1. Compile a list of your applications that use GuardPoints.

2. Prepare users of those applications for the interruption in service required to make these changes.

3. Shut down each of the affected applications.

4. For each application, log in as root and open the unit configuration file for that application using a text editor such as vi. See the table above to determine the location of the systemd unit file.

   For example, the unit configuration file for a hypothetical exampled application would be located in /usr/lib/systemd/system/exampled.service.

5. Locate the [Unit] area in the file and add the following two lines at the end of the [Unit] section:

   After=secfs-fs-barrier.service
BindsTo=secfs-fs-barrier.service

   For example, the exampled application unit configuration file might have the following existing [Unit] section:

   [Unit]
Description=Example server
After=syslog.target
After=network.target

   In this case, you would add the two new lines after After=network.target.

6. Save and close the unit configuration file.

7. Repeat steps 3–6 for each application.

Continue to Adding Applications to the secfs-fs-barrier.service File to make necessary changes to secfs-fs-barrier.service.