mirror of
https://codeberg.org/icewind/shortcutd.git
synced 2026-06-03 17:24:08 +02:00
listen to all keyboards
This commit is contained in:
parent
b07bf5012a
commit
4fbdc1164c
7 changed files with 50 additions and 15 deletions
28
shortcutd.service
Normal file
28
shortcutd.service
Normal file
|
|
@ -0,0 +1,28 @@
|
|||
[Unit]
|
||||
Description=shortcutd
|
||||
|
||||
[Service]
|
||||
# restrict permissions as much as possible
|
||||
ProtectControlGroups=true
|
||||
ProtectHome=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectSystem=full
|
||||
RestrictSUIDSGID=true
|
||||
PrivateNetwork=true
|
||||
CapabilityBoundingSet=true
|
||||
RestrictNamespaces=true
|
||||
RestrictAddressFamilies=AF_UNIX
|
||||
PrivateUsers=true
|
||||
PrivateTmp=true
|
||||
ProtectKernelModules=true
|
||||
ProtectKernelLogs=true
|
||||
NoNewPrivileges=true
|
||||
SystemCallFilter=@system-service
|
||||
SystemCallFilter=~@resources
|
||||
MemoryDenyWriteExecute=true
|
||||
IPAddressDeny=any
|
||||
|
||||
ExecStart=/usr/bin/shortcutd
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Loading…
Add table
Add a link
Reference in a new issue