X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=units%2Fsystemd-journald.service.in;h=4a307c708bca43b5ada9e00fe1583242a16139df;hp=da07cb9ce6c54db1caa4c2a71263f563a96b0127;hb=03ee5c38cb0da193dd08733fb4c0c2809cee6a99;hpb=49dbfa7b2b0bf3906704dac1eaeb4eba91056a19 diff --git a/units/systemd-journald.service.in b/units/systemd-journald.service.in index da07cb9ce..4a307c708 100644 --- a/units/systemd-journald.service.in +++ b/units/systemd-journald.service.in @@ -7,17 +7,23 @@ [Unit] Description=Journal Service -Documentation=man:journald.conf(5) +Documentation=man:systemd-journald.service(8) man:journald.conf(5) DefaultDependencies=no Requires=systemd-journald.socket -After=systemd-journald.socket -After=syslog.socket +After=systemd-journald.socket systemd-journald-dev-log.socket syslog.socket +Before=sysinit.target [Service] +Sockets=systemd-journald.socket systemd-journald-dev-log.socket ExecStart=@rootlibexecdir@/systemd-journald +Restart=always +RestartSec=0 NotifyAccess=all StandardOutput=null CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_SYSLOG CAP_AUDIT_CONTROL CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID +ReadOnlySystem=yes +ProtectedHome=yes +WatchdogSec=1min # Increase the default a bit in order to allow many simultaneous # services being run since we keep one fd open per service.