]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-logind.service.in
test-string-util: add another test for stripping slashes
[thirdparty/systemd.git] / units / systemd-logind.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
91f9dcaf
LP
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
91f9dcaf
LP
8# (at your option) any later version.
9
91f9dcaf
LP
10[Unit]
11Description=Login Service
3f612b91 12Documentation=man:systemd-logind.service(8) man:logind.conf(5)
16a5d412
DR
13Documentation=https://www.freedesktop.org/wiki/Software/systemd/logind
14Documentation=https://www.freedesktop.org/wiki/Software/systemd/multiseat
1ee306e1
LP
15Wants=user.slice
16After=nss-user-lookup.target user.slice
91f9dcaf 17
a132bef0 18# Ask for the dbus socket.
8f9c6fe5
ZJS
19Wants=dbus.socket
20After=dbus.socket
21
91f9dcaf
LP
22[Service]
23ExecStart=@rootlibexecdir@/systemd-logind
454591be 24Restart=always
47ec1184 25RestartSec=0
91f9dcaf 26BusName=org.freedesktop.login1
c2fc2c25 27WatchdogSec=3min
0c28d51a 28CapabilityBoundingSet=CAP_SYS_ADMIN CAP_MAC_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG
40652ca4 29MemoryDenyWriteExecute=yes
0c28d51a 30RestrictRealtime=yes
3c19d0b4 31RestrictNamespaces=yes
0c28d51a 32RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
6489ccfe 33SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io @reboot @swap
7f396e5f 34SystemCallArchitectures=native
bff8f254 35LockPersonality=yes
0a9b166b 36IPAddressDeny=any
aed24c4c 37FileDescriptorStoreMax=512
f84aea43
LP
38
39# Increase the default a bit in order to allow many simultaneous
40# logins since we keep one fd open per session.
41LimitNOFILE=16384