编辑 irqbalance.service - 文件管理器

✏️ 编辑：irqbalance.service

路径：/usr/lib/systemd/system/irqbalance.service

大小：1.04 KB · 修改：2026-04-08 16:39:58 · 权限：0644 · 只读（保存会失败）

[Unit]
Description=irqbalance daemon
Documentation=man:irqbalance(1)
Documentation=https://github.com/Irqbalance/irqbalance
ConditionVirtualization=!container
ConditionCPUs=>1

[Service]
EnvironmentFile=-/etc/sysconfig/irqbalance
ExecStart=/usr/sbin/irqbalance $IRQBALANCE_ARGS
CapabilityBoundingSet=CAP_SETPCAP
NoNewPrivileges=yes
ProtectSystem=strict
ReadOnlyPaths=/
ReadWritePaths=/proc/irq
RestrictAddressFamilies=AF_UNIX AF_NETLINK
RuntimeDirectory=irqbalance/
LimitNOFILE=4096
IPAddressDeny=any
ProtectHome=true
PrivateTmp=yes 
PrivateNetwork=yes
PrivateUsers=true
ProtectHostname=yes 
ProtectClock=yes 
ProtectKernelModules=yes 
ProtectKernelLogs=yes 
ProtectControlGroups=yes 
RestrictNamespaces=yes
LockPersonality=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
RemoveIPC=yes
PrivateMounts=yes
SystemCallFilter=@cpu-emulation @privileged @system-service
SystemCallFilter=~@clock @module @mount @obsolete @raw-io @reboot @resources @swap
SystemCallErrorNumber=EPERM
SystemCallArchitectures=native

[Install]
WantedBy=multi-user.target