feat(full): add some systemd dropin files.

2025-01-18 00:48:10 +01:00 · 2024-01-21 12:29:56 +00:00 · 2024-01-21 12:29:56 +00:00 · 18dbc60ff0
commit 18dbc60ff0
parent c8f37afe9a
23 changed files with 56 additions and 0 deletions
--- a/systemd/full/system/archlinux-keyring-wkd-sync.service
+++ b/systemd/full/system/archlinux-keyring-wkd-sync.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/bluetooth.service
+++ b/systemd/full/system/bluetooth.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/dbus-org.freedesktop.hostname1.service
+++ b/systemd/full/system/dbus-org.freedesktop.hostname1.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/dbus-org.freedesktop.import1.service
+++ b/systemd/full/system/dbus-org.freedesktop.import1.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/dbus-org.freedesktop.locale1.service
+++ b/systemd/full/system/dbus-org.freedesktop.locale1.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/dbus-org.freedesktop.login1.service
+++ b/systemd/full/system/dbus-org.freedesktop.login1.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/dbus-org.freedesktop.machine1.service
+++ b/systemd/full/system/dbus-org.freedesktop.machine1.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/dbus-org.freedesktop.timedate1.service
+++ b/systemd/full/system/dbus-org.freedesktop.timedate1.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/e2scrub@.service
+++ b/systemd/full/system/e2scrub@.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/fprintd.service
+++ b/systemd/full/system/fprintd.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/geoclue.service
+++ b/systemd/full/system/geoclue.service
@ -0,0 +1,6 @@
+[Service]
+NoNewPrivileges=no
+MemoryDenyWriteExecute=no
+ProtectKernelTunables=no
+ProtectKernelModules=no
+RestrictRealtime=no
--- a/systemd/full/system/low-memory-monitor.service
+++ b/systemd/full/system/low-memory-monitor.service
@ -0,0 +1,3 @@
+[Service]
+NoNewPrivileges=no
+
--- a/systemd/full/system/nm-priv-helper.service
+++ b/systemd/full/system/nm-priv-helper.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/paccache.service
+++ b/systemd/full/system/paccache.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/passim.service
+++ b/systemd/full/system/passim.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/polkit.service
+++ b/systemd/full/system/polkit.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/reflector.service
+++ b/systemd/full/system/reflector.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/systemd-journald@.service
+++ b/systemd/full/system/systemd-journald@.service
@ -0,0 +1,3 @@
+[Service]
+NoNewPrivileges=no
+ProtectClock=no
--- a/systemd/full/system/systemd-machined.service
+++ b/systemd/full/system/systemd-machined.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/systemd-networkd.service
+++ b/systemd/full/system/systemd-networkd.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/system/systemd-oomd.service
+++ b/systemd/full/system/systemd-oomd.service
@ -0,0 +1,3 @@
+[Service]
+NoNewPrivileges=no
+ProtectClock=no
--- a/systemd/full/system/systemd-resolved.service
+++ b/systemd/full/system/systemd-resolved.service
@ -0,0 +1,2 @@
+[Service]
+NoNewPrivileges=no
--- a/systemd/full/user/pipewire-media-session.service
+++ b/systemd/full/user/pipewire-media-session.service
@ -0,0 +1,5 @@
+[Service]
+NoNewPrivileges=no
+MemoryDenyWriteExecute=no
+LockPersonality=no
+RestrictNamespaces=no