summaryrefslogtreecommitdiff
path: root/units/systemd-journal-upload.service.in
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2017-09-14 19:45:40 +0200
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2017-09-14 19:45:40 +0200
commitbff8f2543b27d44d8b245eb78ad7e47607d4a53f (patch)
tree23266740f828edf52ca033fd99a4f80b14e7eeea /units/systemd-journal-upload.service.in
parent71b514298bbece7da6bf33c25e46ab4fe8d8d35e (diff)
downloadsystemd-bff8f2543b27d44d8b245eb78ad7e47607d4a53f.tar.gz
units: set LockPersonality= for all our long-running services (#6819)
Let's lock things down. Also, using it is the only way how to properly test this to the fullest extent.
Diffstat (limited to 'units/systemd-journal-upload.service.in')
-rw-r--r--units/systemd-journal-upload.service.in1
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in
index b0bee3925e..98a4b2bb7a 100644
--- a/units/systemd-journal-upload.service.in
+++ b/units/systemd-journal-upload.service.in
@@ -28,6 +28,7 @@ RestrictRealtime=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallArchitectures=native
+LockPersonality=yes
StateDirectory=systemd/journal-upload
# If there are many split up journal files we need a lot of fds to