blob: b9380eaf4fd1393f83a3113c2318ea3ab4509e58 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
|
[Unit]
Description=Monitor Input Switch
Wants=modprobe@i2c_dev.service
Requires=modprobe@i2c_dev.service
[Service]
Type=simple
User=display_switch
Group=display_switch
DeviceAllow=char-i2c rw
Environment="XDG_CONFIG_HOME=/etc/conf.d"
Environment="XDG_DATA_HOME=/var/log/display-switch"
ExecStart=/usr/bin/display_switch
StandardOutput=journal
LogsDirectory=display-switch
StateDirectory=display-switch
# sandboxing
CapabilityBoundingSet=
PrivateTmp=true
PrivateUsers=true
ProcSubset=pid
ProtectClock=true
ProtectHome=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectProc=invisible
ProtectSystem=strict
NoNewPrivileges=true
RemoveIPC=true
RestrictSUIDSGID=true
RestrictAddressFamilies=
[Install]
WantedBy=multi-user.target
|