If after emergency service had been started there is incoming traffic on syslog.socket emergency.service gets killed due to implicit dependencies on basic.target => sysinit.target which in turn conflict with emergency.target. As a workaround explicitly stop syslog.socket when entering emergency.service. Reference: bnc#852232 Index: systemd-208/units/emergency.service.in =================================================================== --- systemd-208/units/emergency.service.in +++ systemd-208/units/emergency.service.in @@ -9,7 +9,7 @@ Description=Emergency Shell Documentation=man:sulogin(8) DefaultDependencies=no -Conflicts=shutdown.target +Conflicts=shutdown.target syslog.socket Before=shutdown.target [Service]