A common and reliable pattern in service unit files is thus:
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
Jeroen Op 't Eynde Duologic
56quarters
/ systemd_service_hardening.md
Created
December 10, 2019 17:24
— forked from ageis/systemd_service_hardening.md
Options for hardening systemd service units
hamidzr
/ sof-audio-setup-carbonx1.sh
Last active
June 2, 2023 01:43
Lenovo Carbon X1 Gen 7 - Audio and microphone fix - https://wiki.archlinux.org/index.php/Lenovo_ThinkPad_X1_Carbon_(Gen_7) might be all you need.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # README You probablyl don't need this script anymore. Please read the comments below to catch up. | |
| ## Description | |
| # Lenovo Carbon X1 Gen 7 - Audio and microphone fix - kernel 5.3+ required. | |
| # The script has only been tested for Arch and OpenSuse, | |
| # Original thread: https://forums.lenovo.com/t5/Ubuntu/Guide-X1-Carbon-7th-Generation-Ubuntu-compatability/td-p/4489823 | |
| # Prereq: Install Linux 5.3 or newer |
andersevenrud
/ alacritty-tmux-vim_truecolor.md
Last active
April 23, 2025 08:47
True Color (24-bit) and italics with alacritty + tmux + vim (neovim)
This should make True Color (24-bit) and italics work in your tmux session and vim/neovim when using Alacritty (and should be compatible with any other terminal emulator, including Kitty).
Running this script should look the same in tmux as without.
curl -s https://gist.githubusercontent.com/lifepillar/09a44b8cf0f9397465614e622979107f/raw/24-bit-color.sh >24-bit-color.sh