units: set ProtectKernelLogs=yes on relevant units

[thirdparty/systemd.git] / units / systemd-timedated.service.in

diff --git a/units/systemd-timedated.service.in b/units/systemd-timedated.service.in
index 819cb4dba290bedd67906063d9c708b5f4b2917d..87859f4aef316765b8ea4e626e39222b88f40b60 100644 (file)
--- a/units/systemd-timedated.service.in
+++ b/units/systemd-timedated.service.in
@@ -27,6 +27,7 @@ ProtectHome=yes
 ProtectHostname=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
+ProtectKernelLogs=yes
 ProtectSystem=strict
 ReadWritePaths=/etc
 RestrictAddressFamilies=AF_UNIX