1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
[Unit]
Description=Thunderbolt system service
After=polkit.service
Documentation=man:boltd(8)
[Service]
Type=dbus
BusName=org.freedesktop.bolt
ExecStart=@libexecdir@/boltd
#Environment="G_MESSAGES_DEBUG=all"
Restart=on-failure
NotifyAccess=main
MemoryDenyWriteExecute=yes
PrivateTmp=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectKernelModules=yes
ProtectSystem=full
RestrictAddressFamilies=AF_NETLINK AF_UNIX
RestrictRealtime=yes
ReadWritePaths=@dbdir@
SystemCallFilter=~@mount
CapabilityBoundingSet=CAP_NET_ADMIN
#directory management
RuntimeDirectory=@dbname@
RuntimeDirectoryPreserve=yes
StateDirectory=@dbname@
|
