units: turn on ProtectKernelModules= for most long-running services

[thirdparty/systemd.git] / units / systemd-journal-remote.service.in

diff --git a/units/systemd-journal-remote.service.in b/units/systemd-journal-remote.service.in
index 323e308871e17406983748f57b7a371e477253c2..5404bf1c035bb884e3ba60c52aea5d9f34dd604e 100644 (file)
--- a/units/systemd-journal-remote.service.in
+++ b/units/systemd-journal-remote.service.in
@@ -22,6 +22,7 @@ ProtectSystem=strict
 ProtectHome=yes
 ProtectControlGroups=yes
 ProtectKernelTunables=yes
+ProtectKernelModules=yes
 MemoryDenyWriteExecute=yes
 RestrictRealtime=yes
 RestrictNamespaces=yes