| # Copyright 2017 The Chromium OS Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style license that can be |
| # found in the LICENSE file. |
| |
| description "Chrome OS MIDI server" |
| author "chromium-os-dev@chromium.org" |
| |
| start on start-arc-instance |
| stop on stop-arc-instance |
| respawn |
| expect fork |
| |
| # Allow the MIDI server real time priority. |
| limit rtprio 20 20 |
| |
| # Needs access to /dev to perform device enumeration. |
| # Needs access to /run/dbus to connect to D-Bus. |
| # Needs access to /run/systemd/journal for logging (crbug.com/932761) |
| exec minijail0 -i -l -p -N -n -v -P /mnt/empty -b / -b /dev -b /proc \ |
| -k 'tmpfs,/run,tmpfs,MS_NOSUID|MS_NODEV|MS_NOEXEC' -b /run/dbus \ |
| -b /run/systemd/journal -t -r \ |
| -S /usr/share/policy/midis-seccomp.policy \ |
| -c 0 -u midis -g midis -G -- /usr/bin/midis |