This unit is provided by:
Options
-
[Install]-
WantedBy=systemd-coredump@.service
-
-
[Service]-
CapabilityBoundingSet=~CAP_SYS_PTRACE CAP_SYS_ADMIN CAP_NET_ADMIN CAP_KILL CAP_SYS_CHROOT CAP_BLOCK_SUSPEND CAP_LINUX_IMMUTABLE -
ExecStart=/usr/lib/drkonqi-coredump-processor %b %i -
ExecStart=/usr/lib/x86_64-linux-gnu/libexec/drkonqi-coredump-processor %b %i -
ExecStart=/usr/libexec/drkonqi-coredump-processor %b %i -
IPAddressDeny=any -
LockPersonalityIntroduced in systemd 235=yes -
MemoryDenyWriteExecuteIntroduced in systemd 231=yes -
Nice=10 -
NoNewPrivilegesIntroduced in systemd 239=yes -
OOMScoreAdjust=500 -
PrivateDevicesIntroduced in systemd 209=yes -
PrivateNetwork=yes -
PrivateTmp=yes -
ProtectClockIntroduced in systemd 245=yes -
ProtectControlGroupsIntroduced in systemd 232=yes -
ProtectHostnameIntroduced in systemd 242=yes -
ProtectKernelLogsIntroduced in systemd 244=yes -
ProtectKernelModulesIntroduced in systemd 232=yes -
ProtectKernelTunablesIntroduced in systemd 232=yes -
ProtectSystemIntroduced in systemd 214=strict -
RestrictAddressFamilies=AF_UNIX -
RestrictNamespacesIntroduced in systemd 233=yes -
RestrictRealtimeIntroduced in systemd 231=yes -
RestrictSUIDSGIDIntroduced in systemd 242=yes -
RuntimeMaxSec=5 minutes -
SystemCallArchitectures=native -
SystemCallErrorNumber=EPERM -
SystemCallFilter=@system-service ~@privileged @resources
-
-
[Unit]-
Description=Pass systemd-coredump journal entries to relevant user for potential DrKonqi handling
-
Additionnal notes
Nothing here.