2017-11-18 19:35:03 +03:00
# SPDX-License-Identifier: LGPL-2.1+
#
2014-03-31 07:08:02 +04:00
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
[Unit]
Description = Journal Remote Upload Service
2015-12-15 04:51:12 +03:00
Documentation = man:systemd-journal-upload(8)
2016-10-12 12:13:13 +03:00
Wants = network-online.target
After = network-online.target
2014-03-31 07:08:02 +04:00
[Service]
2017-10-06 10:06:21 +03:00
DynamicUser = yes
2018-11-12 19:19:48 +03:00
ExecStart = @rootlibexecdir@/systemd-journal-upload --save-state
LockPersonality = yes
MemoryDenyWriteExecute = yes
2014-03-31 07:08:02 +04:00
PrivateDevices = yes
2016-08-26 14:23:27 +03:00
ProtectControlGroups = yes
2018-11-12 19:19:48 +03:00
ProtectHome = yes
2019-02-19 01:30:12 +03:00
ProtectHostname = yes
2017-02-09 13:09:50 +03:00
ProtectKernelModules = yes
2018-11-12 19:19:48 +03:00
ProtectKernelTunables = yes
2016-08-26 14:23:27 +03:00
RestrictAddressFamilies = AF_UNIX AF_INET AF_INET6
2018-11-12 19:19:48 +03:00
RestrictNamespaces = yes
RestrictRealtime = yes
2017-08-02 11:35:11 +03:00
StateDirectory = systemd/journal-upload
2018-11-12 19:19:48 +03:00
SupplementaryGroups = systemd-journal
SystemCallArchitectures = native
User = systemd-journal-upload
2019-10-25 13:17:24 +03:00
@ S E R V I C E _ W A T C H D O G @
2014-03-31 07:08:02 +04:00
2018-10-01 19:08:27 +03:00
# If there are many split up journal files we need a lot of fds to access them
# all in parallel.
2018-10-17 11:21:48 +03:00
LimitNOFILE = @HIGH_RLIMIT_NOFILE@
2015-01-08 05:17:50 +03:00
2014-03-31 07:08:02 +04:00
[Install]
WantedBy = multi-user.target