diff options
author | Kevin Kuehler <keur@xcf.berkeley.edu> | 2019-11-13 16:56:23 -0800 |
---|---|---|
committer | Kevin Kuehler <keur@xcf.berkeley.edu> | 2019-11-15 00:59:54 -0800 |
commit | 6168ae5840bf206b1d1f88d5173fb292230f56a8 (patch) | |
tree | 1048330b903602686dc56cd5986cfeb226d08740 /units/systemd-coredump@.service.in | |
parent | 806aea3879ca86355af24a7c36cdbf7432b0c7c7 (diff) | |
download | systemd-6168ae5840bf206b1d1f88d5173fb292230f56a8.tar.gz |
units: set ProtectKernelLogs=yes on relevant units
We set ProtectKernelLogs=yes on all long running services except for
udevd, since it accesses /dev/kmsg, and journald, since it calls syslog
and accesses /dev/kmsg.
Diffstat (limited to 'units/systemd-coredump@.service.in')
-rw-r--r-- | units/systemd-coredump@.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-coredump@.service.in b/units/systemd-coredump@.service.in index afb2ab9d17..951faa62a1 100644 --- a/units/systemd-coredump@.service.in +++ b/units/systemd-coredump@.service.in @@ -32,6 +32,7 @@ ProtectHome=yes ProtectHostname=yes ProtectKernelModules=yes ProtectKernelTunables=yes +ProtectKernelLogs=yes ProtectSystem=strict RestrictAddressFamilies=AF_UNIX RestrictNamespaces=yes |