[Unit]
Description=Wireless service
Before=network.target
Wants=network.target

[Service]
Type=dbus
BusName=net.connman.iwd
ExecStart=@libexecdir@/iwd
LimitNPROC=1
Restart=on-failure
PrivateTmp=true
NoNewPrivileges=true
DevicePolicy=closed
DeviceAllow=/dev/rfkill rw
ProtectHome=yes
ProtectSystem=strict
ReadWritePaths=@daemon_storagedir@
ProtectControlGroups=yes
ProtectKernelModules=yes

[Install]
WantedBy=multi-user.target