summaryrefslogtreecommitdiffstats
path: root/units/systemd-journal-upload.service.in
diff options
context:
space:
mode:
authorYu Watanabe <watanabe.yu+github@gmail.com>2017-10-06 09:06:21 +0200
committerYu Watanabe <watanabe.yu+github@gmail.com>2017-10-06 09:06:21 +0200
commit941afc4b902af21b0675e9e5d417c2ee6b202f30 (patch)
treea0df719c570c2325e7eb2be8aaafda5b45af7212 /units/systemd-journal-upload.service.in
parenttimesyncd: enable DynamicUser= (diff)
downloadsystemd-941afc4b902af21b0675e9e5d417c2ee6b202f30.tar.xz
systemd-941afc4b902af21b0675e9e5d417c2ee6b202f30.zip
unit: enable DynamicUser= for journal-upload
Diffstat (limited to 'units/systemd-journal-upload.service.in')
-rw-r--r--units/systemd-journal-upload.service.in3
1 files changed, 1 insertions, 2 deletions
diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in
index 98a4b2bb7a..b666ef3568 100644
--- a/units/systemd-journal-upload.service.in
+++ b/units/systemd-journal-upload.service.in
@@ -14,11 +14,10 @@ After=network-online.target
[Service]
ExecStart=@rootlibexecdir@/systemd-journal-upload --save-state
User=systemd-journal-upload
+DynamicUser=yes
SupplementaryGroups=systemd-journal
WatchdogSec=3min
-PrivateTmp=yes
PrivateDevices=yes
-ProtectSystem=strict
ProtectHome=yes
ProtectControlGroups=yes
ProtectKernelTunables=yes