diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in index 98a4b2bb7a..b666ef3568 100644 --- a/units/systemd-journal-upload.service.in +++ b/units/systemd-journal-upload.service.in @@ -14,11 +14,10 @@ After=network-online.target [Service] ExecStart=@rootlibexecdir@/systemd-journal-upload --save-state User=systemd-journal-upload +DynamicUser=yes SupplementaryGroups=systemd-journal WatchdogSec=3min -PrivateTmp=yes PrivateDevices=yes -ProtectSystem=strict ProtectHome=yes ProtectControlGroups=yes ProtectKernelTunables=yes