made inaccessible and empty for
processes invoked by this unit. If set
to <literal>read-only</literal>, the
- two directores are made read-only
+ two directories are made read-only
instead. It is recommended to enable
this setting for all long-running
services (in particular network-facing
namespace. Note that
<option>slave</option> means that file
systems mounted on the host might stay
- mounted continously in the unit's
+ mounted continuously in the unit's
namespace, and thus keep the device
busy. Note that the file system
namespace related options