systemd/units/systemd-bus-proxyd@.service.in

#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Legacy D-Bus Protocol Compatibility Daemon

[Service]
# The first argument will be replaced by the service by information on
# the process requesting the proxy, we need a placeholder to keep the
# space available for this.
ExecStart=@rootlibexecdir@/systemd-bus-proxyd --drop-privileges xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
NotifyAccess=main
CapabilityBoundingSet=CAP_IPC_OWNER CAP_SETUID CAP_SETGID CAP_SETPCAP
PrivateTmp=yes
PrivateDevices=yes
PrivateNetwork=yes
ReadOnlySystem=yes
ProtectedHome=yes
bus: install systemd-bus-proxyd unit files for compatibility with dbus1 2013-12-13 23:29:35 +04:00			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
			`# (at your option) any later version.`

bus: fix typo in systemd-bus-proxyd 2013-12-17 02:25:32 +04:00			`[Unit]`
bus: install systemd-bus-proxyd unit files for compatibility with dbus1 2013-12-13 23:29:35 +04:00			`Description=Legacy D-Bus Protocol Compatibility Daemon`

			`[Service]`
bus: send status message from proxyd to systemd about client we are working for 2013-12-21 07:19:51 +04:00			`# The first argument will be replaced by the service by information on`
			`# the process requesting the proxy, we need a placeholder to keep the`
			`# space available for this.`
bus-proxy: drop priviliges if we can Either become uid/gid of the client we have been forked for, or become the "systemd-bus-proxy" user if the client was root. We retain CAP_IPC_OWNER so that we can tell kdbus we are actually our own client. 2014-06-04 11:55:40 +04:00			`ExecStart=@rootlibexecdir@/systemd-bus-proxyd --drop-privileges xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`
bus: send status message from proxyd to systemd about client we are working for 2013-12-21 07:19:51 +04:00			`NotifyAccess=main`
bus-proxy: drop priviliges if we can Either become uid/gid of the client we have been forked for, or become the "systemd-bus-proxy" user if the client was root. We retain CAP_IPC_OWNER so that we can tell kdbus we are actually our own client. 2014-06-04 11:55:40 +04:00			`CapabilityBoundingSet=CAP_IPC_OWNER CAP_SETUID CAP_SETGID CAP_SETPCAP`
units: make use of PrivateTmp=yes and PrivateDevices=yes for all our long-running daemons 2014-03-19 19:45:28 +04:00			`PrivateTmp=yes`
			`PrivateDevices=yes`
core: enable PrivateNetwork= for a number of our long running services where this is useful 2014-03-20 02:08:39 +04:00			`PrivateNetwork=yes`
bus-proxy: drop priviliges if we can Either become uid/gid of the client we have been forked for, or become the "systemd-bus-proxy" user if the client was root. We retain CAP_IPC_OWNER so that we can tell kdbus we are actually our own client. 2014-06-04 11:55:40 +04:00			`ReadOnlySystem=yes`
			`ProtectedHome=yes`