journal: add CAP_SETUID and CAP_SETGID to capabilities for journald, so that we can...

[elogind.git] / units / systemd-logind.service.in

diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in
index 82a2c6a0ca21e70986bd2660261c19fa3f73f8ec..531b8f7e9310ae88dd9c8a816ef8131406ac5907 100644 (file)
--- a/units/systemd-logind.service.in
+++ b/units/systemd-logind.service.in
@@ -14,5 +14,8 @@ Description=Login Service
 ExecStart=@rootlibexecdir@/systemd-logind
 Type=dbus
 BusName=org.freedesktop.login1
-CapabilityBoundingSet=CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER
-StandardOutput=syslog
+CapabilityBoundingSet=CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG
+
+# Increase the default a bit in order to allow many simultaneous
+# logins since we keep one fd open per session.
+LimitNOFILE=16384