]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-resolved.service.in
Merge pull request #10495 from poettering/login-boot-hookup
[thirdparty/systemd.git] / units / systemd-resolved.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
ee9b9875
TG
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
8# (at your option) any later version.
ee9b9875 9
091a364c
TG
10[Unit]
11Description=Network Name Resolution
12Documentation=man:systemd-resolved.service(8)
16a5d412
DR
13Documentation=https://www.freedesktop.org/wiki/Software/systemd/resolved
14Documentation=https://www.freedesktop.org/wiki/Software/systemd/writing-network-configuration-managers
15Documentation=https://www.freedesktop.org/wiki/Software/systemd/writing-resolver-clients
1f158013 16DefaultDependencies=no
62fb7e80 17After=systemd-sysusers.service systemd-networkd.service
1f158013
DJL
18Before=network.target nss-lookup.target shutdown.target
19Conflicts=shutdown.target
3e060555 20Wants=nss-lookup.target
091a364c
TG
21
22[Service]
635f3df5 23AmbientCapabilities=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
3ca9940c
LP
24CapabilityBoundingSet=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
25ExecStart=!!@rootlibexecdir@/systemd-resolved
26LockPersonality=yes
27MemoryDenyWriteExecute=yes
28NoNewPrivileges=yes
0c28d51a 29PrivateDevices=yes
3ca9940c 30PrivateTmp=yes
0c28d51a 31ProtectControlGroups=yes
3ca9940c 32ProtectHome=yes
99894b86 33ProtectHostname=yes
b6c7278c 34ProtectKernelModules=yes
3ca9940c
LP
35ProtectKernelTunables=yes
36ProtectSystem=strict
37Restart=always
38RestartSec=0
0c28d51a 39RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
3ca9940c
LP
40RestrictNamespaces=yes
41RestrictRealtime=yes
635f3df5
LP
42RuntimeDirectory=systemd/resolve
43RuntimeDirectoryPreserve=yes
3ca9940c
LP
44SystemCallArchitectures=native
45SystemCallErrorNumber=EPERM
46SystemCallFilter=@system-service
47Type=notify
48User=systemd-resolve
49WatchdogSec=3min
091a364c
TG
50
51[Install]
52WantedBy=multi-user.target
4d1f490c 53Alias=dbus-org.freedesktop.resolve1.service