diff options
Diffstat (limited to '')
| -rw-r--r-- | dot_config/systemd/user/plocate-updatedb.service | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/dot_config/systemd/user/plocate-updatedb.service b/dot_config/systemd/user/plocate-updatedb.service new file mode 100644 index 0000000..55620c5 --- /dev/null +++ b/dot_config/systemd/user/plocate-updatedb.service @@ -0,0 +1,28 @@ +[Unit] +Description=Update the plocate database +ConditionACPower=true + +[Service] +Type=oneshot +ExecStart=/usr/sbin/updatedb.plocate -l 0 -o "${XDG_STATE_HOME}/plocate/home.db" -U "${HOME}" +LimitNOFILE=131072 +IOSchedulingClass=idle +Nice=19 + +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_CHOWN +IPAddressDeny=any +LockPersonality=true +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateTmp=true +PrivateDevices=true +PrivateNetwork=true +ProtectClock=true +ProtectControlGroups=true +ProtectHostname=true +RestrictAddressFamilies=AF_UNIX +RestrictNamespaces=true +RestrictRealtime=true +RestrictSUIDSGID=true +SystemCallArchitectures=native +SystemCallFilter=@system-service @chown |