X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=units%2Fsystemd-journal-gatewayd.service.in;h=987220e554208dbf6a0a2eaa4b06d6453a7f8899;hb=a47e6701bfc45519a4e038daa52e9236e932f59a;hp=a01ce8da45372198d4e96d6a84c5e42815fa627d;hpb=37495eede95d3212b797c8459d7ed6258fb23c6a;p=elogind.git

diff --git a/units/systemd-journal-gatewayd.service.in b/units/systemd-journal-gatewayd.service.in
index a01ce8da4..987220e55 100644
--- a/units/systemd-journal-gatewayd.service.in
+++ b/units/systemd-journal-gatewayd.service.in
@@ -14,6 +14,15 @@ ExecStart=@rootlibexecdir@/systemd-journal-gatewayd
 User=systemd-journal-gateway
 Group=systemd-journal-gateway
 SupplementaryGroups=systemd-journal
+PrivateTmp=yes
+PrivateDevices=yes
+PrivateNetwork=yes
+ProtectSystem=full
+ProtectHome=yes
+
+# If there are many split upjournal files we need a lot of fds to
+# access them all and combine
+LimitNOFILE=16384
 
 [Install]
 Also=systemd-journal-gatewayd.socket