feat(full): add some systemd dropin files.

roddhjav · Jan 21, 2024 · 18dbc60 · 18dbc60
1 parent c8f37af
commit 18dbc60
Show file tree

Hide file tree

Showing 23 changed files with 56 additions and 0 deletions.
diff --git a/systemd/full/system/archlinux-keyring-wkd-sync.service b/systemd/full/system/archlinux-keyring-wkd-sync.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/bluetooth.service b/systemd/full/system/bluetooth.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/dbus-org.freedesktop.hostname1.service b/systemd/full/system/dbus-org.freedesktop.hostname1.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/dbus-org.freedesktop.import1.service b/systemd/full/system/dbus-org.freedesktop.import1.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/dbus-org.freedesktop.locale1.service b/systemd/full/system/dbus-org.freedesktop.locale1.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/dbus-org.freedesktop.login1.service b/systemd/full/system/dbus-org.freedesktop.login1.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/dbus-org.freedesktop.machine1.service b/systemd/full/system/dbus-org.freedesktop.machine1.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/dbus-org.freedesktop.timedate1.service b/systemd/full/system/dbus-org.freedesktop.timedate1.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/e2scrub@.service b/systemd/full/system/e2scrub@.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/fprintd.service b/systemd/full/system/fprintd.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/geoclue.service b/systemd/full/system/geoclue.service
@@ -0,0 +1,6 @@
+[Service]
+NoNewPrivileges=no
+MemoryDenyWriteExecute=no
+ProtectKernelTunables=no
+ProtectKernelModules=no
+RestrictRealtime=no
diff --git a/systemd/full/system/low-memory-monitor.service b/systemd/full/system/low-memory-monitor.service
@@ -0,0 +1,3 @@
+[Service]
+NoNewPrivileges=no
+
diff --git a/systemd/full/system/nm-priv-helper.service b/systemd/full/system/nm-priv-helper.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/paccache.service b/systemd/full/system/paccache.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/passim.service b/systemd/full/system/passim.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/polkit.service b/systemd/full/system/polkit.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/reflector.service b/systemd/full/system/reflector.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/systemd-journald@.service b/systemd/full/system/systemd-journald@.service
@@ -0,0 +1,3 @@
+[Service]
+NoNewPrivileges=no
+ProtectClock=no
diff --git a/systemd/full/system/systemd-machined.service b/systemd/full/system/systemd-machined.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/systemd-networkd.service b/systemd/full/system/systemd-networkd.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/system/systemd-oomd.service b/systemd/full/system/systemd-oomd.service
@@ -0,0 +1,3 @@
+[Service]
+NoNewPrivileges=no
+ProtectClock=no
diff --git a/systemd/full/system/systemd-resolved.service b/systemd/full/system/systemd-resolved.service
@@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
diff --git a/systemd/full/user/pipewire-media-session.service b/systemd/full/user/pipewire-media-session.service
@@ -0,0 +1,5 @@
+[Service]
+NoNewPrivileges=no
+MemoryDenyWriteExecute=no
+LockPersonality=no
+RestrictNamespaces=no