On Sun, 20.12.15 17:33, Michael Biebl (mbi...@gmail.com) wrote:

> Hi,
> 
> I'm using systemd v228 and tried to lock down rsyslog a bit.
> 
> For that I added
> 
> # /etc/systemd/system/rsyslog.service.d/override.conf
> [Unit]
> ProtectSystem=yes
> ProtectHome=yes
> CapabilityBoundingSet=~CAP_SYS_ADMIN

None of these three settings belong in [Unit]. They belong in [Service].

Lennart

-- 
Lennart Poettering, Red Hat
_______________________________________________
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to