[Unit] Description=Download provider service [Service] User=web_fw Group=web_fw SupplementaryGroups=priv_mediastorage Type=simple SmackProcessLabel=System ExecStart=/usr/bin/download-provider MemoryLimit=100M Capabilities=cap_dac_override,cap_chown=i SecureBits=keep-caps [Install] WantedBy=graphical.target