1[Unit] 2Description=Sound Service (X11 Plugins) 3Requires=pulseaudio.service 4After=pulseaudio.service 5ConditionUser=!root 6PartOf=gnome-session-x11.target 7 8[Service] 9ExecStart=@PA_X11_BINARY@ 10ExecStop=@PA_X11_BINARY@ stop 11LockPersonality=yes 12MemoryDenyWriteExecute=yes 13NoNewPrivileges=yes 14RestrictNamespaces=yes 15SystemCallArchitectures=native 16SystemCallFilter=@system-service 17Type=simple 18UMask=0077 19