This unit is provided by:
Options
- 
    [Install]- 
        Also=systemd-userdbd.socket
 
- 
        
- 
    [Service]- 
        CapabilityBoundingSet=CAP_DAC_READ_SEARCH
- 
        ExecStart=/lib/systemd/systemd-userdbd
- 
        ExecStart=/usr/lib/systemd/systemd-userdbd
- 
        IPAddressDeny=any
- 
        LimitNOFILE=524288
- 
        LockPersonalityIntroduced in systemd 235=yes
- 
        MemoryDenyWriteExecuteIntroduced in systemd 231=yes
- 
        NoNewPrivilegesIntroduced in systemd 239=yes
- 
        PrivateDevicesIntroduced in systemd 209=yes
- 
        ProtectControlGroupsIntroduced in systemd 232=yes
- 
        ProtectHomeIntroduced in systemd 214=yes
- 
        ProtectHostnameIntroduced in systemd 242=yes
- 
        ProtectKernelLogsIntroduced in systemd 244=yes
- 
        ProtectKernelModulesIntroduced in systemd 232=yes
- 
        ProtectProcIntroduced in systemd 247=invisible
- 
        ProtectSystemIntroduced in systemd 214=strict
- 
        RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
- 
        RestrictNamespacesIntroduced in systemd 233=yes
- 
        RestrictRealtimeIntroduced in systemd 231=yes
- 
        RestrictSUIDSGIDIntroduced in systemd 242=yes
- 
        SystemCallArchitectures=native
- 
        SystemCallErrorNumber=EPERM
- 
        SystemCallFilter=@system-service
- 
        Type=notify
- 
        WatchdogSec=3min
 
- 
        
- 
    [Unit]- 
        After=systemd-userdbd.socket
- 
        Before=sysinit.target
- 
        DefaultDependencies=no
- 
        Description=User Database Manager
- 
        Documentation=man:systemd-userdbd.service(8)
- 
        Requires=systemd-userdbd.socket
 
- 
        
Additionnal notes
Nothing here.