diff options
| author | Topi Miettinen <toiwoton@gmail.com> | 2020-04-02 20:18:11 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2020-04-07 15:37:14 +0200 |
| commit | cabc1c6d7adae658a2966a4b02a6faabb803e92b (patch) | |
| tree | 97d713454ae4cffbf17b841480df3008bf3f2752 /units/systemd-logind.service.in | |
| parent | Remove message->priority field (diff) | |
| download | systemd-cabc1c6d7adae658a2966a4b02a6faabb803e92b.tar.xz systemd-cabc1c6d7adae658a2966a4b02a6faabb803e92b.zip | |
units: add ProtectClock=yes
Add `ProtectClock=yes` to systemd units. Since it implies certain
`DeviceAllow=` rules, make sure that the units have `DeviceAllow=` rules so
they are still able to access other devices. Exclude timesyncd and timedated.
Diffstat (limited to 'units/systemd-logind.service.in')
| -rw-r--r-- | units/systemd-logind.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in index 23aa828591..ed573b8f3c 100644 --- a/units/systemd-logind.service.in +++ b/units/systemd-logind.service.in @@ -36,6 +36,7 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes PrivateTmp=yes +ProtectClock=yes ProtectControlGroups=yes ProtectHome=yes ProtectHostname=yes |