# SPDX-License-Identifier: GPL-2.0-or-later
# SPDX-FileCopyrightText: 2024 GNOME Foundation, Inc.

[Unit]
Description=Parental Controls Timer Daemon
Documentation=man:malcontent-timerd(8)
Before=systemd-user-sessions.service

[Service]
ExecStart=/usr/libexec/malcontent-timerd
Type=dbus
BusName=org.freedesktop.MalcontentTimer1
NotifyAccess=main
User=malcontent-timerd
StateDirectory=malcontent-timerd
RestartMode=debug

# Sandboxing
CapabilityBoundingSet=
Environment=GIO_USE_VFS=local
Environment=GVFS_DISABLE_FUSE=1
Environment=GVFS_REMOTE_VOLUME_MONITOR_IGNORE=1
Environment=GSETTINGS_BACKEND=memory
IPAddressDeny=any
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
PrivateDevices=yes
PrivateIPC=yes
PrivateNetwork=yes
PrivatePIDs=yes
PrivateTmp=yes
PrivateUsers=yes
ProcSubset=pid
ProtectClock=yes
DeviceAllow=
ProtectControlGroups=yes
ProtectHome=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectProc=invisible
ProtectSystem=strict
RemoveIPC=yes
RestrictAddressFamilies=AF_UNIX
RestrictNamespaces=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
SystemCallErrorNumber=EPERM
SystemCallFilter=@basic-io @file-system @io-event @ipc @network-io @process @sync
# FIXME: Needed to keep nss-myhostname happy (see https://github.com/systemd/systemd/issues/38582):
SystemCallFilter=sigprocmask rt_sigprocmask uname
SystemCallArchitectures=native
UMask=0077

[Install]
WantedBy=multi-user.target