units/systemd-logind.service.in

   1 #  This file is part of systemd.
   2 #
   3 #  systemd is free software; you can redistribute it and/or modify it
   4 #  under the terms of the GNU Lesser General Public License as published by
   5 #  the Free Software Foundation; either version 2.1 of the License, or
   6 #  (at your option) any later version.
   7
   8 [Unit]
   9 Description=Login Service
  10 Documentation=man:systemd-logind.service(8) man:logind.conf(5)
  11 Documentation=https://www.freedesktop.org/wiki/Software/systemd/logind
  12 Documentation=https://www.freedesktop.org/wiki/Software/systemd/multiseat
  13 Wants=user.slice
  14 After=nss-user-lookup.target user.slice
  15
  16 # Ask for the dbus socket.
  17 Wants=dbus.socket
  18 After=dbus.socket
  19
  20 [Service]
  21 ExecStart=@rootlibexecdir@/systemd-logind
  22 Restart=always
  23 RestartSec=0
  24 BusName=org.freedesktop.login1
  25 WatchdogSec=3min
  26 CapabilityBoundingSet=CAP_SYS_ADMIN CAP_MAC_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG
  27 MemoryDenyWriteExecute=yes
  28 RestrictRealtime=yes
  29 RestrictNamespaces=yes
  30 RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
  31 SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @obsolete @raw-io @reboot @swap
  32 SystemCallArchitectures=native
  33 FileDescriptorStoreMax=512
  34
  35 # Increase the default a bit in order to allow many simultaneous
  36 # logins since we keep one fd open per session.
  37 LimitNOFILE=16384