# Installed by the michka-kiosk add-on as /etc/systemd/system/michka-hub.service.d/kiosk.conf.
# The kiosk session runs as root on tty1 with its Wayland socket under /run/user/0, so the hub must
# also run as root to drive it (screensaver screen-power via wlr-randr, kiosk restart on a port
# change, exit-to-login, kiosk-autostart toggle). Removing the michka-kiosk package deletes this
# file and the hub reverts to the unprivileged michka user.
[Service]
User=root
Group=root
# Root needs no sandboxing relaxation for the display helpers, but make the intent explicit.
NoNewPrivileges=false
ProtectHome=false
