This unit is provided by:
Options
- 
    [Service]- 
        CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID CAP_MAC_OVERRIDE
- 
        DevicePolicy=closed
- 
        ExecStart=/lib/systemd/systemd-journald %i
- 
        ExecStart=/usr/lib/systemd/systemd-journald %i
- 
        FileDescriptorStoreMax=4224
- 
        Group=systemd-journal
- 
        IPAddressDeny=any
- 
        LimitNOFILE=524288
- 
        LockPersonalityIntroduced in systemd 235=yes
- 
        LogsDirectory=journal/%m.%i
- 
        LogsDirectoryMode=02755
- 
        MemoryDenyWriteExecuteIntroduced in systemd 231=yes
- 
        NoNewPrivilegesIntroduced in systemd 239=yes
- 
        RestrictAddressFamilies=AF_UNIX AF_NETLINK
- 
        RestrictNamespacesIntroduced in systemd 233=yes
- 
        RestrictRealtimeIntroduced in systemd 231=yes
- 
        RestrictSUIDSGIDIntroduced in systemd 242=yes
- 
        RuntimeDirectory=systemd/journal.%i
- 
        RuntimeDirectoryPreserve=yes
- 
        Sockets=systemd-journald@%i.socket
- 
        SystemCallArchitectures=native
- 
        SystemCallErrorNumber=EPERM
- 
        SystemCallFilter=@system-service
- 
        Type=notify
- 
        WatchdogSec=3min
 
- 
        
- 
    [Unit]- 
        After=systemd-journald@%i.socket systemd-journald-varlink@%i.socket
- 
        Description=Journal Service for Namespace %i
- 
        Documentation=man:systemd-journald.service(8) man:journald.conf(5)
- 
        Requires=systemd-journald@%i.socket systemd-journald-varlink@%i.socket
 
- 
        
Additionnal notes
Nothing here.