X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;f=conf%2Funit%2Fgenerate-unit-conf%2Fservice.inc;h=66202434238c05463b8f4d76a93cec37fd1642e8;hb=3476b426fb3443ff909f8d607934e59601c7d508;hp=59df916cd184b259e1a5f7e865c10ae306e161c5;hpb=f2a2f1357a5268b614528feeba0a91f4ea04a7aa;p=src%2Fapp-framework-main.git diff --git a/conf/unit/generate-unit-conf/service.inc b/conf/unit/generate-unit-conf/service.inc index 59df916..6620243 100644 --- a/conf/unit/generate-unit-conf/service.inc +++ b/conf/unit/generate-unit-conf/service.inc @@ -30,6 +30,7 @@ X-AFM--content={{content.src}} X-AFM--type={{content.type}} X-AFM--wgtdir={{:#metadata.install-dir}} X-AFM--workdir=APP_DATA_DIR/{{:id}} +X-AFM--visibility=ON_PERM(`:public:hidden', `hidden', `visible') %nl Requires=afm-user-session@%i.target @@ -70,14 +71,13 @@ SuccessExitStatus=0 SIGKILL User=%i Slice=user-%i.slice -CapabilityBoundingSet= +#CapabilityBoundingSet= #AmbientCapabilities= ON_PERM(:platform:no-oom, OOMScoreAdjust=-500) ON_PERM(:partner:real-time, IOSchedulingClass=realtime) +ON_PERM(:public:display, SupplementaryGroups=display) ON_PERM(:public:syscall:clock, , SystemCallFilter=~@clock) -#ON_PERM(:public:display, SupplementaryGroups=display) -SupplementaryGroups=display %nl WorkingDirectory=-APP_DATA_DIR/{{:id}}