units: set LockPersonality= for all our long-running services (#6819)

[thirdparty/systemd.git] / units / systemd-journal-remote.service.in

diff --git a/units/systemd-journal-remote.service.in b/units/systemd-journal-remote.service.in
index c24e673d8251ddb20676e6b7f8d3fc8db4aa53b3..92cec21c2fbe8978b8f7e6726a090a4c953c5069 100644 (file)
--- a/units/systemd-journal-remote.service.in
+++ b/units/systemd-journal-remote.service.in
@@ -27,6 +27,7 @@ RestrictRealtime=yes
 RestrictNamespaces=yes
 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
 SystemCallArchitectures=native
+LockPersonality=yes
 LogsDirectory=journal/remote
 
 [Install]