X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=units%2Fsystemd-journald.service.in;h=4a307c708bca43b5ada9e00fe1583242a16139df;hp=3899745306c44de278f523ba29f141a161f8a118;hb=03ee5c38cb0da193dd08733fb4c0c2809cee6a99;hpb=b8156be03f71c53072c7126bb418410acbef6c81 diff --git a/units/systemd-journald.service.in b/units/systemd-journald.service.in index 389974530..4a307c708 100644 --- a/units/systemd-journald.service.in +++ b/units/systemd-journald.service.in @@ -9,16 +9,21 @@ Description=Journal Service Documentation=man:systemd-journald.service(8) man:journald.conf(5) DefaultDependencies=no -Wants=systemd-journal-flush.service Requires=systemd-journald.socket -After=systemd-journald.socket syslog.socket +After=systemd-journald.socket systemd-journald-dev-log.socket syslog.socket +Before=sysinit.target [Service] +Sockets=systemd-journald.socket systemd-journald-dev-log.socket ExecStart=@rootlibexecdir@/systemd-journald Restart=always +RestartSec=0 NotifyAccess=all StandardOutput=null CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_SYSLOG CAP_AUDIT_CONTROL CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID +ReadOnlySystem=yes +ProtectedHome=yes +WatchdogSec=1min # Increase the default a bit in order to allow many simultaneous # services being run since we keep one fd open per service.