X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=units%2Fsystemd-journal-gatewayd.service.in;h=987220e554208dbf6a0a2eaa4b06d6453a7f8899;hp=e8e571e692a1362732f19cb719503691e48150a1;hb=66f2ff06ca4ee5ea686b884e2923a31832ad8fe4;hpb=f21a71a907a1b1289faec94559f4a1c111ea1d13

diff --git a/units/systemd-journal-gatewayd.service.in b/units/systemd-journal-gatewayd.service.in
index e8e571e69..987220e55 100644
--- a/units/systemd-journal-gatewayd.service.in
+++ b/units/systemd-journal-gatewayd.service.in
@@ -17,6 +17,12 @@ SupplementaryGroups=systemd-journal
 PrivateTmp=yes
 PrivateDevices=yes
 PrivateNetwork=yes
+ProtectSystem=full
+ProtectHome=yes
+
+# If there are many split upjournal files we need a lot of fds to
+# access them all and combine
+LimitNOFILE=16384
 
 [Install]
 Also=systemd-journal-gatewayd.socket