colin/iio-sensor-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

data: Lockdown systemd service

Browse Source 
As detailed in systemd.exec(5).
This commit is contained in:
Bastien Nocera
2017-01-05 13:06:37 +01:00
parent b474bf0943
commit 45f9a63885
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
data/iio-sensor-proxy.service.in
View File

@@ -7,3 +7,13 @@ BusName=net.hadess.SensorProxy
ExecStart=@sbindir@/iio-sensor-proxy ExecStart=@sbindir@/iio-sensor-proxy
#Uncomment this to enable debug #Uncomment this to enable debug
#Environment="G_MESSAGES_DEBUG=all" #Environment="G_MESSAGES_DEBUG=all"
# Lockdown
ProtectSystem=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
PrivateTmp=true
PrivateNetwork=true
MemoryDenyWriteExecute=true
RestrictRealtime=true