systemd/units/systemd-resolved.service.m4.in

#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Network Name Resolution
Documentation=man:systemd-resolved.service(8)
After=systemd-networkd.service network.target

m4_ifdef(`ENABLE_KDBUS',
# On kdbus systems we pull in the busname explicitly, because it
# carries policy that allows the daemon to acquire its name.
Wants=org.freedesktop.resolve1.busname
After=org.freedesktop.resolve1.busname

)m4_dnl
[Service]
Type=notify
Restart=always
RestartSec=0
ExecStart=@rootlibexecdir@/systemd-resolved
CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER
ProtectSystem=full
ProtectHome=yes
WatchdogSec=1min

[Install]
WantedBy=multi-user.target
networkd: add missing files 2014-05-16 22:14:23 +04:00			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
			`# (at your option) any later version.`

resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd. 2014-05-19 00:10:48 +04:00			`[Unit]`
			`Description=Network Name Resolution`
			`Documentation=man:systemd-resolved.service(8)`
units: fix typo in systemd-resolved.service There's no network.service unit, we actually mean network.target here. Reported by Fco. Eduardo Ramírez. 2015-05-14 23:32:35 +03:00			`After=systemd-networkd.service network.target`
resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd. 2014-05-19 00:10:48 +04:00
resolved: Do not add .busname dependencies, when compiling without kdbus. 2015-03-17 18:37:07 +03:00			m4_ifdef(`ENABLE_KDBUS',
units: make resolved pull in its own .busname unit, but only on kdbus systems The daemon requires the busname unit to operate, since it contains the policy that allows it to acquire its service name. 2015-01-08 00:19:02 +03:00			`# On kdbus systems we pull in the busname explicitly, because it`
			`# carries policy that allows the daemon to acquire its name.`
			`Wants=org.freedesktop.resolve1.busname`
			`After=org.freedesktop.resolve1.busname`

resolved: Do not add .busname dependencies, when compiling without kdbus. 2015-03-17 18:37:07 +03:00			`)m4_dnl`
resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd. 2014-05-19 00:10:48 +04:00			`[Service]`
			`Type=notify`
			`Restart=always`
			`RestartSec=0`
			`ExecStart=@rootlibexecdir@/systemd-resolved`
resolved: run as unpriviliged "systemd-resolve" user This service is not yet network facing, but let's prepare nonetheless. Currently all caps are dropped, but some may need to be kept in the future. 2014-06-02 01:01:20 +04:00			`CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER`
core: rename ReadOnlySystem= to ProtectSystem= and add a third value for also mounting /etc read-only Also, rename ProtectedHome= to ProtectHome=, to simplify things a bit. With this in place we now have two neat options ProtectSystem= and ProtectHome= for protecting the OS itself (and optionally its configuration), and for protecting the user's data. 2014-06-04 20:07:55 +04:00			`ProtectSystem=full`
			`ProtectHome=yes`
units: turn on watchdog for resolved 2015-01-27 16:30:52 +03:00			`WatchdogSec=1min`
resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd. 2014-05-19 00:10:48 +04:00
			`[Install]`
			`WantedBy=multi-user.target`