[Unit] Description="Dlog cleanup daemon" [Service] Type=oneshot User=log Group=log ExecStart=/usr/bin/dlog_cleanup SmackProcessLabel=System CapabilityBoundingSet=~CAP_MAC_ADMIN CapabilityBoundingSet=~CAP_MAC_OVERRIDE