This unit is provided by:
Options
-
[Service]
-
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID CAP_MAC_OVERRIDE
-
DevicePolicy=closed
-
ExecStart=/lib/systemd/systemd-journald %i
-
ExecStart=/usr/lib/systemd/systemd-journald %i
-
FileDescriptorStoreMax=4224
-
Group=systemd-journal
-
IPAddressDeny=any
-
LimitNOFILE=524288
-
LockPersonality
Introduced in systemd 235=yes -
LogsDirectory=journal/%m.%i
-
LogsDirectoryMode=02755
-
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
RestrictAddressFamilies=AF_UNIX AF_NETLINK
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
RuntimeDirectory=systemd/journal.%i
-
RuntimeDirectoryPreserve=yes
-
Sockets=systemd-journald@%i.socket
-
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service
-
Type=notify
-
WatchdogSec=3min
-
-
[Unit]
-
After=systemd-journald@%i.socket systemd-journald-varlink@%i.socket
-
Description=Journal Service for Namespace %i
-
Documentation=man:systemd-journald.service(8) man:journald.conf(5)
-
Requires=systemd-journald@%i.socket systemd-journald-varlink@%i.socket
-
Additionnal notes
Nothing here.