summaryrefslogtreecommitdiff
path: root/units/systemd-timedated.service.in
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2017-02-09 11:09:50 +0100
committerLennart Poettering <lennart@poettering.net>2017-02-09 16:12:03 +0100
commitb6c7278c38b5c240d8435ab6293838ee5de827cb (patch)
tree6bc091bdabe57219ce6a0868df34528e66651395 /units/systemd-timedated.service.in
parentc7fb922d6250543ba5462fa7a6ff03cc8f628e94 (diff)
downloadsystemd-b6c7278c38b5c240d8435ab6293838ee5de827cb.tar.gz
units: turn on ProtectKernelModules= for most long-running services
Diffstat (limited to 'units/systemd-timedated.service.in')
-rw-r--r--units/systemd-timedated.service.in1
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-timedated.service.in b/units/systemd-timedated.service.in
index 336a231290..2881e122dc 100644
--- a/units/systemd-timedated.service.in
+++ b/units/systemd-timedated.service.in
@@ -20,6 +20,7 @@ ProtectSystem=strict
ProtectHome=yes
ProtectControlGroups=yes
ProtectKernelTunables=yes
+ProtectKernelModules=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictNamespaces=yes