service ctf { disable = no socket_type = stream protocol = tcp wait = no user = root type = UNLISTED port = 8000 bind = 0.0.0.0 server = /bin/sh server_args = /ctf/run.sh banner_fail = /etc/banner_fail # safety options rlimit_cpu = 1 # the maximum number of CPU seconds that the service may use }