Skip to content

Commit dd3fa15

Browse files
committed
Add systemd service for backlightd
1 parent e1681a5 commit dd3fa15

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

backlightd.service

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
[Unit]
2+
Description=A backlight daemon that allows you to manage the backlight of all kinds of monitors
3+
4+
[Service]
5+
Type=simple
6+
Restart=always
7+
ExecStart=/usr/bin/backlightd
8+
ProtectSystem=strict
9+
ProtectHome=tmpfs
10+
PrivateTmp=true
11+
ProtectKernelTunables=true
12+
ProtectKernelModules=true
13+
ProtectKernelLogs=true
14+
ProtectControlGroups=true
15+
MemoryDenyWriteExecute=true
16+
RestrictAddressFamilies=AF_UNIX
17+
SocketBindDeny=ipv4:tcp
18+
SocketBindDeny=ipv4:udp
19+
SocketBindDeny=ipv6:tcp
20+
SocketBindDeny=ipv6:udp
21+
LockPersonality=true
22+
RestrictRealtime=true
23+
ProtectClock=true
24+
CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_BPF CAP_CHOWN CAP_MKNOD CAP_NET_RAW CAP_PERFMON CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_MODULE CAP_SYS_NICE CAP_SYS_PACCT CAP_SYS_PTRACE CAP_SYS_TIME CAP_SYSLOG CAP_WAKE_ALARM
25+
SystemCallFilter=~@aio:EPERM @chown:EPERM @clock:EPERM @cpu-emulation:EPERM @debug:EPERM @ipc:EPERM @keyring:EPERM @memlock:EPERM @module:EPERM @mount:EPERM @obsolete:EPERM @pkey:EPERM @privileged:EPERM @raw-io:EPERM @reboot:EPERM @resources:EPERM @sandbox:EPERM @setuid:EPERM @swap:EPERM @sync:EPERM @timer:EPERM
26+
27+
[Install]
28+
WantedBy=multi-user.target

0 commit comments

Comments
 (0)