chiark / gitweb /
udev: do NOT re-label smack
[elogind.git] / units / systemd-journal-gatewayd.service.in
index c3b5c72..5bd8e4b 100644 (file)
@@ -11,6 +11,14 @@ Requires=systemd-journal-gatewayd.socket
 
 [Service]
 ExecStart=@rootlibexecdir@/systemd-journal-gatewayd
+User=systemd-journal-gateway
+Group=systemd-journal-gateway
+SupplementaryGroups=systemd-journal
+PrivateTmp=yes
+PrivateDevices=yes
+PrivateNetwork=yes
+ProtectSystem=full
+ProtectHome=yes
 
 [Install]
 Also=systemd-journal-gatewayd.socket