summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWayne Davison <wayne@opencoder.net>2020-06-17 09:31:48 -0700
committerWayne Davison <wayne@opencoder.net>2020-06-17 09:31:48 -0700
commitd3c7cfad226f0d1b74247d9b97fb7787a50cf0a4 (patch)
treea1d0b19037b5408d8cdbb2b9ae79cb4be603c5a5
parent9ec777faf8ca1572188ef206a5dbcb7bb721781c (diff)
downloadrsync-d3c7cfad226f0d1b74247d9b97fb7787a50cf0a4.tar.gz
Be a little more explicit with override info.
-rw-r--r--packaging/systemd/rsync.service5
-rw-r--r--packaging/systemd/rsync@.service5
2 files changed, 8 insertions, 2 deletions
diff --git a/packaging/systemd/rsync.service b/packaging/systemd/rsync.service
index ea978141..6d1031fd 100644
--- a/packaging/systemd/rsync.service
+++ b/packaging/systemd/rsync.service
@@ -16,7 +16,10 @@ RestartSec=1
#
# So let's assume some extra security is more than welcome here. We do full
# system protection (which makes it read-only) and hide users' homes and
-# devices. See systemd.unit(5) and search for "drop-in" to override.
+# devices. To override these defaults, it's best to do so in the drop-in
+# directory, often done via `systemctl edit rsync.service`. The file needs
+# just the bare minimum of the right [heading] and override values.
+# See systemd.unit(5) and search for "drop-in" for full details.
ProtectSystem=full
ProtectHome=on
diff --git a/packaging/systemd/rsync@.service b/packaging/systemd/rsync@.service
index 2508c93e..e1f48da8 100644
--- a/packaging/systemd/rsync@.service
+++ b/packaging/systemd/rsync@.service
@@ -17,7 +17,10 @@ StandardError=journal
#
# So let's assume some extra security is more than welcome here. We do full
# system protection (which makes it read-only) and hide users' homes and
-# devices. See systemd.unit(5) and search for "drop-in" to override.
+# devices. To override these defaults, it's best to do so in the drop-in
+# directory, often done via `systemctl edit rsync@.service`. The file needs
+# just the bare minimum of the right [heading] and override values.
+# See systemd.unit(5) and search for "drop-in" for full details.
ProtectSystem=full
ProtectHome=on