listen to all keyboards

This commit is contained in:
Robin Appelman 2020-04-11 15:01:52 +02:00
commit 4fbdc1164c
7 changed files with 50 additions and 15 deletions

28
shortcutd.service Normal file
View file

@ -0,0 +1,28 @@
[Unit]
Description=shortcutd
[Service]
# restrict permissions as much as possible
ProtectControlGroups=true
ProtectHome=true
ProtectKernelTunables=true
ProtectSystem=full
RestrictSUIDSGID=true
PrivateNetwork=true
CapabilityBoundingSet=true
RestrictNamespaces=true
RestrictAddressFamilies=AF_UNIX
PrivateUsers=true
PrivateTmp=true
ProtectKernelModules=true
ProtectKernelLogs=true
NoNewPrivileges=true
SystemCallFilter=@system-service
SystemCallFilter=~@resources
MemoryDenyWriteExecute=true
IPAddressDeny=any
ExecStart=/usr/bin/shortcutd
[Install]
WantedBy=multi-user.target