This unit is provided by:
Options
-
[Install]
-
Also=systemd-sysupdate.timer
-
-
[Service]
-
CapabilityBoundingSet=CAP_CHOWN CAP_FOWNER CAP_FSETID CAP_MKNOD CAP_SETFCAP CAP_SYS_ADMIN CAP_SETPCAP CAP_DAC_OVERRIDE CAP_LINUX_IMMUTABLE
-
ExecStart=/usr/lib/systemd/systemd-sysupdate update
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
NotifyAccess=main
-
ProtectHostname
Introduced in systemd 242=yes -
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-
RestrictNamespaces
Introduced in systemd 233=net -
RestrictRealtime
Introduced in systemd 231=yes -
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service @mount
-
Type=simple
-
-
[Unit]
-
After=network-online.target
-
ConditionVirtualization=!container
-
Description=Automatic System Update
-
Documentation=man:systemd-sysupdate.service(8)
-
Wants=network-online.target
-
Additionnal notes
Nothing here.