X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=units%2Fsystemd-logind.service.in;h=68803fb3811f49a05e59b5a56752f7d7f17f0f98;hp=c6cbd1c8df30a5d2d3babb96d1e4b77f997fac85;hb=417116f23432073162ebfcb286a7800846482eed;hpb=85b5673b337048fa881a5afb1d00d1a7b95950fb

diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in
index c6cbd1c8d..68803fb38 100644
--- a/units/systemd-logind.service.in
+++ b/units/systemd-logind.service.in
@@ -25,6 +25,8 @@ RestartSec=0
 BusName=org.freedesktop.login1
 CapabilityBoundingSet=CAP_SYS_ADMIN CAP_AUDIT_CONTROL CAP_CHOWN CAP_KILL CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_FOWNER CAP_SYS_TTY_CONFIG
 WatchdogSec=1min
+ReadOnlySystem=yes
+ProtectedHome=yes
 
 # Increase the default a bit in order to allow many simultaneous
 # logins since we keep one fd open per session.