diff options
| author | Lennart Poettering <lennart@poettering.net> | 2014-03-19 16:45:28 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2014-03-19 19:09:00 +0100 |
| commit | d99a70529637d44cdd8f6ade3b981ea33f09d90d (patch) | |
| tree | 8a6633cb6e978c21820e0a621a12d29fe169bfee /units/systemd-hostnamed.service.in | |
| parent | update TODO (diff) | |
| download | systemd-d99a70529637d44cdd8f6ade3b981ea33f09d90d.tar.xz systemd-d99a70529637d44cdd8f6ade3b981ea33f09d90d.zip | |
units: make use of PrivateTmp=yes and PrivateDevices=yes for all our long-running daemons
Diffstat (limited to 'units/systemd-hostnamed.service.in')
| -rw-r--r-- | units/systemd-hostnamed.service.in | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/units/systemd-hostnamed.service.in b/units/systemd-hostnamed.service.in index 3f5ef75c0b..c8bf8480c9 100644 --- a/units/systemd-hostnamed.service.in +++ b/units/systemd-hostnamed.service.in @@ -15,3 +15,5 @@ ExecStart=@rootlibexecdir@/systemd-hostnamed BusName=org.freedesktop.hostname1 CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE WatchdogSec=1min +PrivateTmp=yes +PrivateDevices=yes |