unit: enable DynamicUser= for journal-upload
This commit is contained in:
parent
48d3e88c18
commit
941afc4b90
|
@ -14,11 +14,10 @@ After=network-online.target
|
||||||
[Service]
|
[Service]
|
||||||
ExecStart=@rootlibexecdir@/systemd-journal-upload --save-state
|
ExecStart=@rootlibexecdir@/systemd-journal-upload --save-state
|
||||||
User=systemd-journal-upload
|
User=systemd-journal-upload
|
||||||
|
DynamicUser=yes
|
||||||
SupplementaryGroups=systemd-journal
|
SupplementaryGroups=systemd-journal
|
||||||
WatchdogSec=3min
|
WatchdogSec=3min
|
||||||
PrivateTmp=yes
|
|
||||||
PrivateDevices=yes
|
PrivateDevices=yes
|
||||||
ProtectSystem=strict
|
|
||||||
ProtectHome=yes
|
ProtectHome=yes
|
||||||
ProtectControlGroups=yes
|
ProtectControlGroups=yes
|
||||||
ProtectKernelTunables=yes
|
ProtectKernelTunables=yes
|
||||||
|
|
Loading…
Reference in a new issue