7367a8fc4b
Since we don't write the applications we use, this is liable to break pretty easily for new/older versions than tested on. The other protections should be sufficient.
22 lines
348 B
Desktop File
22 lines
348 B
Desktop File
[Unit]
|
|
Description=Clipmenu daemon
|
|
|
|
[Service]
|
|
ExecStart=/usr/bin/clipmenud
|
|
Restart=always
|
|
RestartSec=0
|
|
Environment=DISPLAY=:0
|
|
|
|
MemoryDenyWriteExecute=yes
|
|
NoNewPrivileges=yes
|
|
ProtectControlGroups=yes
|
|
ProtectKernelTunables=yes
|
|
RestrictAddressFamilies=
|
|
RestrictRealtime=yes
|
|
|
|
ProtectSystem=strict
|
|
ReadWritePaths=/tmp
|
|
|
|
[Install]
|
|
WantedBy=default.target
|