| [Unit] | |
| Description=Run CIS Scanner with given environment variables | |
| [Service] | |
| EnvironmentFile=-/etc/cis-scanner/env_vars | |
| Type=simple | |
| # NX feature is mandatory on ARMv8. Therefore, excluded this check from the scanning. | |
| ExecStart=/usr/bin/cis_scanner \ | |
| --config="${CONFIG}" \ | |
| --result="${RESULT}" \ | |
| --max-cis-profile-level="${LEVEL}" \ | |
| --show-compliant-benchmarks=true \ | |
| --benchmark-opt-out-ids=nx-enabled \ | |
| "${EXTRA_OPTIONS}" | |
| [Install] | |
| WantedBy=multi-user.target |