diff options
Diffstat (limited to 'units/systemd-journal-remote.service.in')
| -rw-r--r-- | units/systemd-journal-remote.service.in | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/units/systemd-journal-remote.service.in b/units/systemd-journal-remote.service.in index cab7778ddc..323e308871 100644 --- a/units/systemd-journal-remote.service.in +++ b/units/systemd-journal-remote.service.in @@ -18,7 +18,7 @@ WatchdogSec=3min PrivateTmp=yes PrivateDevices=yes PrivateNetwork=yes -ProtectSystem=full +ProtectSystem=strict ProtectHome=yes ProtectControlGroups=yes ProtectKernelTunables=yes @@ -27,6 +27,7 @@ RestrictRealtime=yes RestrictNamespaces=yes RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 SystemCallArchitectures=native +ReadWritePaths=/var/log/journal/remote [Install] Also=systemd-journal-remote.socket |