]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-udevd.service.in
bless-boot: add missing verb to --help
[thirdparty/systemd.git] / units / systemd-udevd.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
49dbfa7b
LP
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
8# (at your option) any later version.
9
43fefbf6 10[Unit]
41a7c3bf 11Description=Rule-based Manager for Device Events and Files
ee1c0ad4 12Documentation=man:systemd-udevd.service(8) man:udev(7)
b0afe214 13DefaultDependencies=no
1d422b15 14After=systemd-sysusers.service systemd-hwdb-update.service
edeb68c5
TG
15Before=sysinit.target
16ConditionPathIsReadWrite=/sys
43fefbf6
KS
17
18[Service]
cabc1c6d
TM
19DeviceAllow=block-* rwm
20DeviceAllow=char-* rwm
43fefbf6 21Type=notify
2ec71e43 22# Note that udev also adjusts the OOM score internally and will reset the value internally for its workers
2b4f9e67 23OOMScoreAdjust=-1000
51dfddc2 24Sockets=systemd-udevd-control.socket systemd-udevd-kernel.socket
454591be 25Restart=always
47ec1184 26RestartSec=0
f13b388f 27ExecStart=@rootlibexecdir@/systemd-udevd
cdc6804b 28ExecReload=udevadm control --reload --timeout 0
658f26b8 29KillMode=mixed
de2edc00 30TasksMax=infinity
b2e8ae73 31PrivateMounts=yes
cabc1c6d 32ProtectClock=yes
99894b86 33ProtectHostname=yes
0c28d51a 34MemoryDenyWriteExecute=yes
94f42fe3 35RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
62aa2924
LP
36RestrictRealtime=yes
37RestrictSUIDSGID=yes
ee8f2618
LP
38SystemCallFilter=@system-service @module @raw-io
39SystemCallErrorNumber=EPERM
7f396e5f 40SystemCallArchitectures=native
bff8f254 41LockPersonality=yes
0a9b166b 42IPAddressDeny=any
21d0dd5a 43@SERVICE_WATCHDOG@