This unit is provided by:
Options
-
[Service]
-
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_SYSLOG CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID CAP_MAC_OVERRIDE
-
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_SYSLOG CAP_AUDIT_CONTROL CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID
-
DeviceAllow=char-* rw
-
ExecStart=/lib/systemd/systemd-journald
-
ExecStart=/usr/lib/systemd/systemd-journald
-
FileDescriptorStoreMax=4224
-
IPAddressDeny=any
-
LimitNOFILE=16384
-
LimitNOFILE=524288
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
NotifyAccess=all
-
OOMScoreAdjust=-250
-
ProtectClock
Introduced in systemd 245=yes -
Restart=always
-
RestartSec=0
-
RestrictAddressFamilies=AF_UNIX AF_NETLINK
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
RuntimeDirectory=systemd/journal
-
RuntimeDirectoryPreserve=yes
-
Sockets=systemd-journald.socket systemd-journald-dev-log.socket systemd-journald-audit.socket
-
StandardOutput=null
-
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service
-
Type=notify
-
WatchdogSec=3min
-
-
[Unit]
-
After=systemd-journald.socket syslog.socket
-
After=systemd-journald.socket systemd-journald-dev-log.socket systemd-journald-audit.socket syslog.socket
-
Before=sysinit.target
-
DefaultDependencies=no
-
Description=Journal Service
-
Documentation=man:systemd-journald.service(8) man:journald.conf(5)
-
Documentation=man:systemd-journald.service(8) man:systemd-journald.conf(5)
-
IgnoreOnIsolate=yes
-
Requires=systemd-journald.socket
-
Additionnal notes
Nothing here.