d(・ω・d) 微分！(∫・ω・)∫ 積分！∂(・ω・∂) 偏微分！(∮・ω・)∮ 沿閉曲線的積分！(∬・ω・)∬ 重積分！∇(・ω・∇)梯度！∇・(・ω・∇・)散度！∇×(・ω・∇×)旋度！Δ(・ω・Δ)拉普拉斯！#ﾟÅﾟ）⊂彡☆))ﾟДﾟ)･∵ლ(◉◞౪◟◉ )ლ千言萬語，不如一個「表情符號(emoji)」簡單生動又有趣!ಠ▃ಠ生氣、-`д´-憤怒、(¬_¬)無言、(•͈⌔•͈⑅)傷心、哭、開心、大笑、可愛、困惑、發呆、大眼睛、驚呀、跳舞、興奮、奔跑..≧Д≦ （;≧皿≦） (⁎˃ᆺ˂) ╬ Ò ‸ Ó) <(｀^´)> ( >д<)
(ꐦ ಠ皿ಠ ) (｀Д´) (;｀O´)o o(-`д´- ｡) ( ˃⌂˂ ) (°ㅂ° ╬)
(ʘ言ʘ╬) (Ò 皿 Ó ╬) (-`д´-) 눈_눈 (⋋▂⋌) (¬▂¬)
ಠ▃ಠ (＞x＜) ╰（‵□′）╯
D.R.S Dz
Sindbad~EG File Manager
[Unit]
Description=PowerDNS Authoritative Server
Documentation=man:pdns_server(1) man:pdns_control(1)
Documentation=https://doc.powerdns.com
Wants=network-online.target
After=network-online.target time-sync.target
Conflicts=named.service
[Service]
ExecStart=/usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
SyslogIdentifier=pdns_server
User=named
Group=named
Type=notify
Restart=on-failure
RestartSec=1
StartLimitInterval=0
RuntimeDirectory=pdns
# Sandboxing
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
LockPersonality=true
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
# Setting PrivateUsers=true prevents us from opening our sockets
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
# ProtectSystem=full will disallow write access to /etc and /usr, possibly
# not being able to write slaved-zones into sqlite3 or zonefiles.
ProtectSystem=full
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true
SystemCallArchitectures=native
SystemCallFilter=~ @clock @debug @module @mount @raw-io @reboot @swap @cpu-emulation @obsolete
ProtectProc=invisible
PrivateIPC=true
RemoveIPC=true
DevicePolicy=closed
# Not enabled by default because it does not play well with LuaJIT
# MemoryDenyWriteExecute=true
[Install]
WantedBy=multi-user.target
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists