diff options
| author | Kevin Kuehler <keur@xcf.berkeley.edu> | 2019-11-14 01:56:23 +0100 |
|---|---|---|
| committer | Kevin Kuehler <keur@xcf.berkeley.edu> | 2019-11-15 09:59:54 +0100 |
| commit | 6168ae5840bf206b1d1f88d5173fb292230f56a8 (patch) | |
| tree | 1048330b903602686dc56cd5986cfeb226d08740 /units/systemd-timesyncd.service.in | |
| parent | test-namespace: Add test for ProtectKernelLogs= (diff) | |
| download | systemd-6168ae5840bf206b1d1f88d5173fb292230f56a8.tar.xz systemd-6168ae5840bf206b1d1f88d5173fb292230f56a8.zip | |
units: set ProtectKernelLogs=yes on relevant units
We set ProtectKernelLogs=yes on all long running services except for
udevd, since it accesses /dev/kmsg, and journald, since it calls syslog
and accesses /dev/kmsg.
Diffstat (limited to 'units/systemd-timesyncd.service.in')
| -rw-r--r-- | units/systemd-timesyncd.service.in | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/units/systemd-timesyncd.service.in b/units/systemd-timesyncd.service.in index 1a866fcc7a..f0486a70ab 100644 --- a/units/systemd-timesyncd.service.in +++ b/units/systemd-timesyncd.service.in @@ -32,6 +32,7 @@ ProtectHome=yes ProtectHostname=yes ProtectKernelModules=yes ProtectKernelTunables=yes +ProtectKernelLogs=yes ProtectSystem=strict Restart=always RestartSec=0 |