systemd/units/systemd-resolved.service.in

#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

[Unit]
Description=Network Name Resolution
Documentation=man:systemd-resolved.service(8)
After=systemd-networkd.service network.service

[Service]
Type=notify
Restart=always
RestartSec=0
ExecStart=@rootlibexecdir@/systemd-resolved
CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER
ProtectSystem=full
ProtectHome=yes

[Install]
WantedBy=multi-user.target
networkd: add missing files 2014-05-16 22:14:23 +04:00			`# This file is part of systemd.`
			`#`
			`# systemd is free software; you can redistribute it and/or modify it`
			`# under the terms of the GNU Lesser General Public License as published by`
			`# the Free Software Foundation; either version 2.1 of the License, or`
			`# (at your option) any later version.`

resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd. 2014-05-19 00:10:48 +04:00			`[Unit]`
			`Description=Network Name Resolution`
			`Documentation=man:systemd-resolved.service(8)`
			`After=systemd-networkd.service network.service`

			`[Service]`
			`Type=notify`
			`Restart=always`
			`RestartSec=0`
			`ExecStart=@rootlibexecdir@/systemd-resolved`
resolved: run as unpriviliged "systemd-resolve" user This service is not yet network facing, but let's prepare nonetheless. Currently all caps are dropped, but some may need to be kept in the future. 2014-06-02 01:01:20 +04:00			`CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SETPCAP CAP_CHOWN CAP_DAC_OVERRIDE CAP_FOWNER`
core: rename ReadOnlySystem= to ProtectSystem= and add a third value for also mounting /etc read-only Also, rename ProtectedHome= to ProtectHome=, to simplify things a bit. With this in place we now have two neat options ProtectSystem= and ProtectHome= for protecting the OS itself (and optionally its configuration), and for protecting the user's data. 2014-06-04 20:07:55 +04:00			`ProtectSystem=full`
			`ProtectHome=yes`
resolved: add daemon to manage resolv.conf Also remove the equivalent functionality from networkd. 2014-05-19 00:10:48 +04:00
			`[Install]`
			`WantedBy=multi-user.target`