diff --git a/systemd/nohang-desktop.service.in b/systemd/nohang-desktop.service.in index cd856cf..78016eb 100644 --- a/systemd/nohang-desktop.service.in +++ b/systemd/nohang-desktop.service.in @@ -2,7 +2,7 @@ Description=Sophisticated low memory handler Documentation=man:nohang(8) https://github.com/hakavlad/nohang Conflicts=nohang.service -After=system.slice +After=sysinit.target [Service] ExecStart=:TARGET_SBINDIR:/nohang --monitor --config :TARGET_SYSCONFDIR:/nohang/nohang-desktop.conf @@ -26,6 +26,7 @@ ProtectKernelTunables=true ProtectKernelModules=true ProtectControlGroups=true PrivateDevices=true +PrivateTmp=true MemoryDenyWriteExecute=yes RestrictNamespaces=yes LockPersonality=yes diff --git a/systemd/nohang.service.in b/systemd/nohang.service.in index f43f871..189c9ea 100644 --- a/systemd/nohang.service.in +++ b/systemd/nohang.service.in @@ -2,7 +2,7 @@ Description=Sophisticated low memory handler Documentation=man:nohang(8) https://github.com/hakavlad/nohang Conflicts=nohang-desktop.service -After=system.slice +After=sysinit.target [Service] ExecStart=:TARGET_SBINDIR:/nohang --monitor --config :TARGET_SYSCONFDIR:/nohang/nohang.conf @@ -26,6 +26,7 @@ ProtectKernelTunables=true ProtectKernelModules=true ProtectControlGroups=true PrivateDevices=true +PrivateTmp=true MemoryDenyWriteExecute=yes RestrictNamespaces=yes LockPersonality=yes