File tree Expand file tree Collapse file tree 1 file changed +28
-0
lines changed
Expand file tree Collapse file tree 1 file changed +28
-0
lines changed Original file line number Diff line number Diff line change 1+ [Unit]
2+ Description =A backlight daemon that allows you to manage the backlight of all kinds of monitors
3+
4+ [Service]
5+ Type =simple
6+ Restart =always
7+ ExecStart =/usr/bin/backlightd
8+ ProtectSystem =strict
9+ ProtectHome =tmpfs
10+ PrivateTmp =true
11+ ProtectKernelTunables =true
12+ ProtectKernelModules =true
13+ ProtectKernelLogs =true
14+ ProtectControlGroups =true
15+ MemoryDenyWriteExecute =true
16+ RestrictAddressFamilies =AF_UNIX
17+ SocketBindDeny =ipv4:tcp
18+ SocketBindDeny =ipv4:udp
19+ SocketBindDeny =ipv6:tcp
20+ SocketBindDeny =ipv6:udp
21+ LockPersonality =true
22+ RestrictRealtime =true
23+ ProtectClock =true
24+ CapabilityBoundingSet =~CAP_BLOCK_SUSPEND CAP_BPF CAP_CHOWN CAP_MKNOD CAP_NET_RAW CAP_PERFMON CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_MODULE CAP_SYS_NICE CAP_SYS_PACCT CAP_SYS_PTRACE CAP_SYS_TIME CAP_SYSLOG CAP_WAKE_ALARM
25+ SystemCallFilter =~@aio:EPERM @chown:EPERM @clock:EPERM @cpu-emulation:EPERM @debug:EPERM @ipc:EPERM @keyring:EPERM @memlock:EPERM @module:EPERM @mount:EPERM @obsolete:EPERM @pkey:EPERM @privileged:EPERM @raw-io:EPERM @reboot:EPERM @resources:EPERM @sandbox:EPERM @setuid:EPERM @swap:EPERM @sync:EPERM @timer:EPERM
26+
27+ [Install]
28+ WantedBy =multi-user.target
You can’t perform that action at this time.
0 commit comments