50e35a55d8
- Remove PrivateDevices, ProtectClock and ProtectKernelLogs=true from klog.service and ProtectKernelLogs from klogd.service (bsc#1193172) OBS-URL: https://build.opensuse.org/request/show/934727 OBS-URL: https://build.opensuse.org/package/show/Base:System/syslogd?expand=0&rev=152
51 lines
1.4 KiB
Desktop File
51 lines
1.4 KiB
Desktop File
# /lib/systemd/system/klogd.service
|
|
#
|
|
# This file is part of package klogd.
|
|
#
|
|
# Copyright (c) 2011 SuSE LINUX Products GmbH, Germany.
|
|
# Author: Werner Fink
|
|
# Please send feedback to http://www.suse.de/feedback
|
|
#
|
|
# Description:
|
|
#
|
|
# Used to start klogd, the System Kernel Logging Service
|
|
# if and only if the System Logger does not provide this
|
|
# its self. If the System Logger can do Kernel Logging
|
|
# Service this file should be masked by a symbolic link
|
|
# from /etc/systemd/system/klogd.service to /dev/null.
|
|
#
|
|
# If klogd.service is started then BindsTo=syslog.service
|
|
# within unit section to make it disappear if syslogd dies.
|
|
#
|
|
|
|
[Unit]
|
|
Description=System Kernel Logging Service
|
|
Requisite=syslogd.service
|
|
BindsTo=syslogd.service
|
|
After=syslogd.service
|
|
RefuseManualStart=true
|
|
|
|
[Service]
|
|
# added automatically, for details please see
|
|
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
|
ProtectSystem=full
|
|
ProtectHome=true
|
|
PrivateDevices=true
|
|
ProtectHostname=true
|
|
ProtectClock=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectControlGroups=true
|
|
RestrictRealtime=true
|
|
# end of automatic additions
|
|
Type=simple
|
|
StandardOutput=syslog
|
|
StandardError=syslog
|
|
Environment=KERNEL_LOGLEVEL=1
|
|
Environment=KLOGD_PARAMS=
|
|
EnvironmentFile=-/etc/sysconfig/syslog
|
|
ExecStart=/sbin/klogd -n -c $KERNEL_LOGLEVEL $KLOGD_PARAMS -x
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|