From b6c7278c38b5c240d8435ab6293838ee5de827cb Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Thu, 9 Feb 2017 11:09:50 +0100 Subject: units: turn on ProtectKernelModules= for most long-running services --- units/systemd-journal-remote.service.in | 1 + 1 file changed, 1 insertion(+) (limited to 'units/systemd-journal-remote.service.in') diff --git a/units/systemd-journal-remote.service.in b/units/systemd-journal-remote.service.in index 323e308871..5404bf1c03 100644 --- a/units/systemd-journal-remote.service.in +++ b/units/systemd-journal-remote.service.in @@ -22,6 +22,7 @@ ProtectSystem=strict ProtectHome=yes ProtectControlGroups=yes ProtectKernelTunables=yes +ProtectKernelModules=yes MemoryDenyWriteExecute=yes RestrictRealtime=yes RestrictNamespaces=yes -- cgit v1.2.3-54-g00ecf