[Unit] Description=SiS PM Control for Linux Wants=network-online.target After=network-online.target Wants=systemd-udev-settle.service After=systemd-udev-settle.service [Install] WantedBy=multi-user.target [Service] CapabilityBoundingSet= LockPersonality=true MemoryDenyWriteExecute=true NoNewPrivileges=true PrivateTmp=true PrivateUsers=true ProtectClock=true ProtectControlGroups=true ProtectHome=true ProtectKernelModules=true ProtectKernelTunables=true ProtectSystem=strict RemoveIPC=true RestrictAddressFamilies=AF_INET AF_INET6 RestrictNamespaces=true RestrictRealtime=true SystemCallFilter=@system-service SystemCallArchitectures=native UMask=177 Type=forking ExecStart=/usr/bin/sispmctl -p 2638 -l SyslogIdentifier=sispmctl Restart=always RestartSec=5