Revert "data: Add additional fprintd lockdown"

The current lockdown rules prevent USB devices from being accessed and
cause threading to not work.
As such, revert them until it is clear on how/if we can apply these
measures. It is primarily not clear on how to prevent fork/clone as
fprintd does not need those.

This reverts commit 2fd86624e5.

See: #82
This commit is contained in:
Benjamin Berg
2020-11-06 10:22:32 +01:00
committed by Benjamin Berg
parent b2cae5cccf
commit e224913b80

View File

@ -15,8 +15,6 @@ ProtectControlGroups=true
StateDirectory=fprint
ProtectHome=true
PrivateTmp=true
ProtectKernelLogs=yes
SystemCallFilter=@system-service
# Network
PrivateNetwork=true
@ -33,8 +31,3 @@ RestrictRealtime=true
# Privilege escalation
NoNewPrivileges=true
TasksMax=1
# Capabilities
CapabilityBoundingSet=
ProtectClock=yes