%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµùÕ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream
[Unit] Description=Daemon for power management Documentation=man:upowerd(8) [Service] Type=dbus BusName=org.freedesktop.UPower ExecStart=/usr/libexec/upowerd Restart=on-failure # Filesystem lockdown ProtectSystem=strict # Needed by keyboard backlight support ProtectKernelTunables=false ProtectControlGroups=true ReadWritePaths=/var/lib/upower StateDirectory=upower ProtectHome=true PrivateTmp=true # Network # PrivateNetwork=true would block udev's netlink socket IPAddressDeny=any RestrictAddressFamilies=AF_UNIX AF_NETLINK # Execute Mappings MemoryDenyWriteExecute=true # Modules ProtectKernelModules=true # Real-time RestrictRealtime=true # Privilege escalation NoNewPrivileges=true # Capabilities CapabilityBoundingSet= # System call interfaces LockPersonality=yes SystemCallArchitectures=native SystemCallFilter=@system-service SystemCallFilter=ioprio_get # Namespaces PrivateUsers=yes RestrictNamespaces=yes # Locked memory LimitMEMLOCK=0 [Install] WantedBy=graphical.target