[Socket]
ListenStream=/run/security-manager.socket
SocketMode=0777
SmackLabelIPIn=*
SmackLabelIPOut=@

# TODO: move to separate systemd service
Service=security-manager.service

[Unit]
Wants=security-manager.target
Before=security-manager.target

[Install]
WantedBy=sockets.target