26 lines
653 B
SYSTEMD
26 lines
653 B
SYSTEMD
|
[Unit]
|
||
|
|
Description=Activate the HoloLake Code Channel Fifth Domain personal subchannel
|
||
|
|
After=hlcc-jd-candidate.service
|
||
|
|
Requires=hlcc-jd-candidate.service
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Type=oneshot
|
||
|
|
User=guanghu
|
||
|
|
Group=guanghu
|
||
|
|
ExecStart=/usr/bin/python3 __RELEASE_ROOT__/server-tools/hololake-code-channel/jd-candidate/activate-staged-candidate.py
|
||
|
|
RemainAfterExit=true
|
||
|
|
TimeoutStartSec=180
|
||
|
|
NoNewPrivileges=true
|
||
|
|
ProtectSystem=strict
|
||
|
|
ProtectHome=true
|
||
|
|
PrivateTmp=true
|
||
|
|
PrivateDevices=true
|
||
|
|
ProtectKernelTunables=true
|
||
|
|
ProtectKernelModules=true
|
||
|
|
ProtectControlGroups=true
|
||
|
|
RestrictSUIDSGID=true
|
||
|
|
LockPersonality=true
|
||
|
|
ReadOnlyPaths=__RELEASE_ROOT__
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|