]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-logind.service.in
Merge pull request #10495 from poettering/login-boot-hookup
[thirdparty/systemd.git] / units / systemd-logind.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
91f9dcaf
LP
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
91f9dcaf
LP
8# (at your option) any later version.
9
91f9dcaf
LP
10[Unit]
11Description=Login Service
3f612b91 12Documentation=man:systemd-logind.service(8) man:logind.conf(5)
16a5d412
DR
13Documentation=https://www.freedesktop.org/wiki/Software/systemd/logind
14Documentation=https://www.freedesktop.org/wiki/Software/systemd/multiseat
1ee306e1
LP
15Wants=user.slice
16After=nss-user-lookup.target user.slice
91f9dcaf 17
a132bef0 18# Ask for the dbus socket.
8f9c6fe5
ZJS
19Wants=dbus.socket
20After=dbus.socket
21
91f9dcaf 22[Service]
91f9dcaf 23BusName=org.freedesktop.login1
31b221cf 24CapabilityBoundingSet=CAP_SYS_ADMIN CAP_MAC_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG CAP_LINUX_IMMUTABLE
3ca9940c
LP
25ExecStart=@rootlibexecdir@/systemd-logind
26FileDescriptorStoreMax=512
27IPAddressDeny=any
28LockPersonality=yes
40652ca4 29MemoryDenyWriteExecute=yes
3ca9940c 30NoNewPrivileges=yes
99894b86 31ProtectHostname=yes
3ca9940c
LP
32Restart=always
33RestartSec=0
dea63635 34RestrictAddressFamilies=AF_UNIX AF_NETLINK
3ca9940c
LP
35RestrictNamespaces=yes
36RestrictRealtime=yes
7f396e5f 37SystemCallArchitectures=native
3ca9940c
LP
38SystemCallErrorNumber=EPERM
39SystemCallFilter=@system-service
40WatchdogSec=3min
f84aea43 41
c35ee02c
LP
42# Increase the default a bit in order to allow many simultaneous logins since
43# we keep one fd open per session.
c02b6ee4 44LimitNOFILE=@HIGH_RLIMIT_NOFILE@