update systemd service unit files

README.md

@@ -86,9 +86,8 @@ To use `PSI`:
 ## Warnings
 
 - the daemon runs with super-user privileges and has full access to all private memory of all processes and sensitive user data;
-- the daemon starts with increased priority;
+- the daemon does not forbid you to shoot yourself in the foot: with some settings, unwanted mass killings of processes can occur;
-- the daemon does not forbid you to shoot yourself in the foot: with some settings, unwanted mass killings of processes can occur.
+- the daemon is not a panacea: there are no universal settings that reliably protect against all types of threats.
-- the daemon is not a panacea: there are no universal settings that reliably protect against all types of threats;
 
 ## Known problems
 

nohang/nohang-desktop.service.in

@@ -11,12 +11,12 @@ KillMode=mixed
 Restart=always
 RestartSec=0
 
-Nice=-5
 CPUSchedulingResetOnFork=true
 RestrictRealtime=yes
 
 TasksMax=20
-MemoryMax=200M
+MemoryMax=100M
+MemorySwapMax=100M
 
 UMask=0027
 ProtectSystem=strict

nohang/nohang.service.in

@@ -11,12 +11,12 @@ KillMode=mixed
 Restart=always
 RestartSec=0
 
-Nice=-5
 CPUSchedulingResetOnFork=true
 RestrictRealtime=yes
 
 TasksMax=20
-MemoryMax=200M
+MemoryMax=100M
+MemorySwapMax=100M
 
 UMask=0027
 ProtectSystem=strict