A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
import sys | |
import os | |
import struct | |
from ctypes import (CDLL, get_errno) | |
from ctypes.util import find_library | |
from socket import ( | |
socket, | |
AF_BLUETOOTH, | |
SOCK_RAW, | |
BTPROTO_HCI, |