Marcus Meissner
f8d795ec62
Add DeviceAllow=char-input to excpilcitly allow access to /dev/input/* If it's not set, then you get "cannot open input layer" error message in logs. It's related to ProtectClock=true being added in previous revision as it is also preventing access to other devices, see similar issue here: https://github.com/tailscale/tailscale/issues/1063#issuecomment-751425789 OBS-URL: https://build.opensuse.org/request/show/912735 OBS-URL: https://build.opensuse.org/package/show/Base:System/acpid?expand=0&rev=101
21 lines
428 B
Desktop File
21 lines
428 B
Desktop File
[Unit]
|
|
Description=ACPI Event Daemon
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelLogs=true
|
|
ProtectControlGroups=true
|
|
|
|
DeviceAllow=char-input
|
|
|
|
ExecStart=/usr/sbin/acpid -n -f
|
|
ExecReload=/bin/kill -s HUP $MAINPID
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|