This unit is provided by:
Options
- 
    [Service]- 
        CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_SYSLOG CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID CAP_MAC_OVERRIDE
- 
        CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_SYSLOG CAP_AUDIT_CONTROL CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID
- 
        DeviceAllow=char-* rw
- 
        ExecStart=/lib/systemd/systemd-journald
- 
        ExecStart=/usr/lib/systemd/systemd-journald
- 
        FileDescriptorStoreMax=4224
- 
        IPAddressDeny=any
- 
        LimitNOFILE=16384
- 
        LimitNOFILE=524288
- 
        LockPersonalityIntroduced in systemd 235=yes
- 
        MemoryDenyWriteExecuteIntroduced in systemd 231=yes
- 
        NoNewPrivilegesIntroduced in systemd 239=yes
- 
        NotifyAccess=all
- 
        OOMScoreAdjust=-250
- 
        ProtectClockIntroduced in systemd 245=yes
- 
        Restart=always
- 
        RestartSec=0
- 
        RestrictAddressFamilies=AF_UNIX AF_NETLINK
- 
        RestrictNamespacesIntroduced in systemd 233=yes
- 
        RestrictRealtimeIntroduced in systemd 231=yes
- 
        RestrictSUIDSGIDIntroduced in systemd 242=yes
- 
        RuntimeDirectory=systemd/journal
- 
        RuntimeDirectoryPreserve=yes
- 
        Sockets=systemd-journald.socket systemd-journald-dev-log.socket systemd-journald-audit.socket
- 
        StandardOutput=null
- 
        SystemCallArchitectures=native
- 
        SystemCallErrorNumber=EPERM
- 
        SystemCallFilter=@system-service
- 
        Type=notify
- 
        WatchdogSec=3min
 
- 
        
- 
    [Unit]- 
        After=systemd-journald.socket syslog.socket
- 
        After=systemd-journald.socket systemd-journald-dev-log.socket systemd-journald-audit.socket syslog.socket
- 
        Before=sysinit.target
- 
        DefaultDependencies=no
- 
        Description=Journal Service
- 
        Documentation=man:systemd-journald.service(8) man:journald.conf(5)
- 
        Documentation=man:systemd-journald.service(8) man:systemd-journald.conf(5)
- 
        IgnoreOnIsolate=yes
- 
        Requires=systemd-journald.socket
 
- 
        
Additionnal notes
Nothing here.