[Unit] Documentation=man:lircd(8) Documentation=http://lirc.org/html/configure.html Description=Flexible IR remote input/output application support Wants=lircd-setup.service After=network.target lircd-setup.service [Service] Type=notify ExecStart=/usr/sbin/lircd --nodaemon ; User=lirc ; Group=lirc ; Hardening opts, see systemd.exec(5). Doesn't add much unless ; not running as root. ; ; # Required for dropping privileges in --effective-user. ; CapabilityBoundingSet=CAP_SETEUID ; MemoryDenyWriteExecute=true ; NoNewPrivileges=true ; PrivateTmp=true ; ProtectHome=true ; ProtectSystem=full [Install] WantedBy=multi-user.target