2026-02-13 15:04:02 +00:00
|
|
|
[Unit]
|
|
|
|
|
Description=odidere
|
2026-10-09 15:49:55 +00:00
|
|
|
After=network.target
|
2026-02-13 15:04:02 +00:00
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
ExecStart=%h/.local/bin/odidere -c %h/.config/odidere/config.yaml
|
|
|
|
|
Restart=on-failure
|
|
|
|
|
|
2026-10-09 15:49:55 +00:00
|
|
|
# These optional restrictions also apply to tool subprocesses.
|
|
|
|
|
# https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html
|
2026-02-13 15:04:02 +00:00
|
|
|
|
2026-10-09 15:49:55 +00:00
|
|
|
# Restricts system calls to the native architecture. Tools that execute
|
|
|
|
|
# binaries for another ABI, such as 32-bit binaries, can fail.
|
|
|
|
|
# SystemCallArchitectures=native
|
|
|
|
|
|
|
|
|
|
# Blocks writable executable memory. Tool runtimes that generate machine
|
|
|
|
|
# code can fail under this restriction.
|
|
|
|
|
# MemoryDenyWriteExecute=true
|
|
|
|
|
|
|
|
|
|
# Prevents privilege gains through setuid executables or file capabilities.
|
|
|
|
|
# Tools that rely on those privilege gains can fail.
|
|
|
|
|
# NoNewPrivileges=true
|
2026-02-13 15:04:02 +00:00
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=default.target
|
