X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=units%2Fsystemd-machined.service.in;h=3ae0847b7906b30421518f288195e973a6ae1f68;hb=324d7a53b9c53b33520b97f2562219ac4143f581;hp=26bfe0353790f9b3e4a8d61d26bb78a637cd491b;hpb=bc5cb1d525461c75e69ce1f82a52e223309cca7c;p=elogind.git diff --git a/units/systemd-machined.service.in b/units/systemd-machined.service.in index 26bfe0353..3ae0847b7 100644 --- a/units/systemd-machined.service.in +++ b/units/systemd-machined.service.in @@ -14,7 +14,11 @@ After=machine.slice [Service] ExecStart=@rootlibexecdir@/systemd-machined -Restart=always -RestartSec=0 BusName=org.freedesktop.machine1 CapabilityBoundingSet=CAP_KILL +WatchdogSec=1min +PrivateTmp=yes +PrivateDevices=yes +PrivateNetwork=yes +ProtectSystem=full +ProtectHome=yes