diff options
-rw-r--r-- | packaging/systemd/rsync.service | 5 | ||||
-rw-r--r-- | packaging/systemd/rsync@.service | 5 |
2 files changed, 8 insertions, 2 deletions
diff --git a/packaging/systemd/rsync.service b/packaging/systemd/rsync.service index ea978141..6d1031fd 100644 --- a/packaging/systemd/rsync.service +++ b/packaging/systemd/rsync.service @@ -16,7 +16,10 @@ RestartSec=1 # # So let's assume some extra security is more than welcome here. We do full # system protection (which makes it read-only) and hide users' homes and -# devices. See systemd.unit(5) and search for "drop-in" to override. +# devices. To override these defaults, it's best to do so in the drop-in +# directory, often done via `systemctl edit rsync.service`. The file needs +# just the bare minimum of the right [heading] and override values. +# See systemd.unit(5) and search for "drop-in" for full details. ProtectSystem=full ProtectHome=on diff --git a/packaging/systemd/rsync@.service b/packaging/systemd/rsync@.service index 2508c93e..e1f48da8 100644 --- a/packaging/systemd/rsync@.service +++ b/packaging/systemd/rsync@.service @@ -17,7 +17,10 @@ StandardError=journal # # So let's assume some extra security is more than welcome here. We do full # system protection (which makes it read-only) and hide users' homes and -# devices. See systemd.unit(5) and search for "drop-in" to override. +# devices. To override these defaults, it's best to do so in the drop-in +# directory, often done via `systemctl edit rsync@.service`. The file needs +# just the bare minimum of the right [heading] and override values. +# See systemd.unit(5) and search for "drop-in" for full details. ProtectSystem=full ProtectHome=on |