summaryrefslogtreecommitdiff
path: root/units/systemd-logind.service.in
diff options
context:
space:
mode:
authorTopi Miettinen <toiwoton@gmail.com>2020-04-02 21:18:11 +0300
committerLennart Poettering <lennart@poettering.net>2020-04-07 15:37:14 +0200
commitcabc1c6d7adae658a2966a4b02a6faabb803e92b (patch)
tree97d713454ae4cffbf17b841480df3008bf3f2752 /units/systemd-logind.service.in
parentc3362c2f97115d7eecac556cf70034992c46221d (diff)
downloadsystemd-cabc1c6d7adae658a2966a4b02a6faabb803e92b.tar.gz
units: add ProtectClock=yes
Add `ProtectClock=yes` to systemd units. Since it implies certain `DeviceAllow=` rules, make sure that the units have `DeviceAllow=` rules so they are still able to access other devices. Exclude timesyncd and timedated.
Diffstat (limited to 'units/systemd-logind.service.in')
-rw-r--r--units/systemd-logind.service.in1
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in
index 23aa828591..ed573b8f3c 100644
--- a/units/systemd-logind.service.in
+++ b/units/systemd-logind.service.in
@@ -36,6 +36,7 @@ LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
PrivateTmp=yes
+ProtectClock=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectHostname=yes