diff options
| author | Kevin Kuehler <keur@xcf.berkeley.edu> | 2019-11-14 01:56:23 +0100 |
|---|---|---|
| committer | Kevin Kuehler <keur@xcf.berkeley.edu> | 2019-11-15 09:59:54 +0100 |
| commit | 6168ae5840bf206b1d1f88d5173fb292230f56a8 (patch) | |
| tree | 1048330b903602686dc56cd5986cfeb226d08740 /units/systemd-logind.service.in | |
| parent | test-namespace: Add test for ProtectKernelLogs= (diff) | |
| download | systemd-6168ae5840bf206b1d1f88d5173fb292230f56a8.tar.xz systemd-6168ae5840bf206b1d1f88d5173fb292230f56a8.zip | |
units: set ProtectKernelLogs=yes on relevant units
We set ProtectKernelLogs=yes on all long running services except for
udevd, since it accesses /dev/kmsg, and journald, since it calls syslog
and accesses /dev/kmsg.
Diffstat (limited to 'units/systemd-logind.service.in')
| -rw-r--r-- | units/systemd-logind.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in index ef802a4e6f..ccbe631586 100644 --- a/units/systemd-logind.service.in +++ b/units/systemd-logind.service.in @@ -41,6 +41,7 @@ ProtectControlGroups=yes ProtectHome=yes ProtectHostname=yes ProtectKernelModules=yes +ProtectKernelLogs=yes ProtectSystem=strict ReadWritePaths=/etc /run Restart=always |