diff options
| author | Yu Watanabe <watanabe.yu+github@gmail.com> | 2017-10-06 16:06:21 +0900 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2017-10-06 16:06:21 +0900 |
| commit | 941afc4b902af21b0675e9e5d417c2ee6b202f30 (patch) | |
| tree | a0df719c570c2325e7eb2be8aaafda5b45af7212 /units/systemd-journal-upload.service.in | |
| parent | 48d3e88c18258d423c3953372ec4a2e638ab0422 (diff) | |
| download | systemd-941afc4b902af21b0675e9e5d417c2ee6b202f30.tar.gz | |
unit: enable DynamicUser= for journal-upload
Diffstat (limited to 'units/systemd-journal-upload.service.in')
| -rw-r--r-- | units/systemd-journal-upload.service.in | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in index 98a4b2bb7a..b666ef3568 100644 --- a/units/systemd-journal-upload.service.in +++ b/units/systemd-journal-upload.service.in @@ -14,11 +14,10 @@ After=network-online.target [Service] ExecStart=@rootlibexecdir@/systemd-journal-upload --save-state User=systemd-journal-upload +DynamicUser=yes SupplementaryGroups=systemd-journal WatchdogSec=3min -PrivateTmp=yes PrivateDevices=yes -ProtectSystem=strict ProtectHome=yes ProtectControlGroups=yes ProtectKernelTunables=yes |