smoothscroll.service

[Unit]
Description=smoothscroll — merged pointer with libinput button scrolling
Documentation=https://github.com/malparty/LinuxScrollFix

[Service]
Type=simple
ExecStart=/usr/local/bin/smoothscroll --config /etc/smoothscroll.toml
Restart=always
RestartSec=2

# Needs /dev/input (read+EVIOCGRAB) and /dev/uinput (write). Everything else
# is off: no network, no filesystem writes, no privilege escalation.
DeviceAllow=/dev/uinput rw
DeviceAllow=char-input rw
DevicePolicy=closed
CapabilityBoundingSet=
AmbientCapabilities=
NoNewPrivileges=yes
PrivateNetwork=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictAddressFamilies=AF_UNIX
RestrictNamespaces=yes
RestrictRealtime=yes
LockPersonality=yes
MemoryDenyWriteExecute=yes
SystemCallFilter=@system-service
SystemCallArchitectures=native

[Install]
WantedBy=multi-user.target