1
0
Fork 0
mirror of https://gitlab.postmarketos.org/postmarketOS/pmaports.git synced 2025-07-24 15:25:13 +03:00
pmaports/extra-repos/systemd/systemd-services/system-geoclue.service
2025-01-10 13:02:32 +01:00

31 lines
507 B
Desktop File

[Unit]
Description=Location Lookup Service
[Service]
Type=dbus
BusName=org.freedesktop.GeoClue2
User=geoclue
Environment="GSETTINGS_BACKEND=memory"
ExecStart=/usr/libexec/geoclue
# Filesystem lockdown
ProtectSystem=strict
ProtectKernelTunables=true
ProtectControlGroups=true
ProtectHome=true
PrivateTmp=true
# Network
PrivateNetwork=false
# Execute Mappings
MemoryDenyWriteExecute=true
# Modules
ProtectKernelModules=true
# Real-time
RestrictRealtime=true
# Privilege escalation
NoNewPrivileges=true