diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2021-05-16 20:13:14 +0200 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2021-05-19 10:25:26 +0900 |
| commit | 71ae5ce544f5ec8ec9856d930cbca6b3a5a7a3bf (patch) | |
| tree | 8d5308dd0e1854df9a9ad5e6ad9a008341382cf9 /units/systemd-localed.service.in | |
| parent | 491bf10c808b7e8cac1f23635848ae046a838b00 (diff) | |
| download | systemd-71ae5ce544f5ec8ec9856d930cbca6b3a5a7a3bf.tar.gz | |
units: generate ReadWritePaths= in the template
Diffstat (limited to 'units/systemd-localed.service.in')
| -rw-r--r-- | units/systemd-localed.service.in | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/units/systemd-localed.service.in b/units/systemd-localed.service.in index abd32266ae..f9a92fef7b 100644 --- a/units/systemd-localed.service.in +++ b/units/systemd-localed.service.in @@ -33,7 +33,10 @@ ProtectKernelLogs=yes ProtectKernelModules=yes ProtectKernelTunables=yes ProtectSystem=strict -ReadWritePaths=/etc{{SERVICE_LOCALEGEN_WRITABLE}} +ReadWritePaths=/etc +{% if HAVE_LOCALEGEN %} +ReadWritePaths=/usr/lib/locale +{% endif %} RestrictAddressFamilies=AF_UNIX RestrictNamespaces=yes RestrictRealtime=yes |