From 26530fde09754872a7fe4a9f1cd564b1b42b4e5b Mon Sep 17 00:00:00 2001 From: April & May & June Date: Wed, 24 Dec 2025 17:41:05 +0800 Subject: [PATCH] feat: Apply systemd.exec limit options This should work as intended. --- services/ddm.service.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/ddm.service.in b/services/ddm.service.in index 06e4c8c..e48b29a 100644 --- a/services/ddm.service.in +++ b/services/ddm.service.in @@ -14,7 +14,7 @@ Before=seatd.service ExecStart=@CMAKE_INSTALL_FULL_BINDIR@/ddm Restart=always -CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_KILL CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_TTY_CONFIG +CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_DAC_READ_SEARCH CAP_FOWNER CAP_KILL CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_BOOT CAP_SYS_CHROOT CAP_SYS_TTY_CONFIG OOMScoreAdjust=-300 Nice=-15 PrivateIPC=true