]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-timedated.service.in
Merge pull request #7476 from jhxie/ycm-meson-backend
[thirdparty/systemd.git] / units / systemd-timedated.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
f401e48c
LP
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
f401e48c
LP
8# (at your option) any later version.
9
f401e48c
LP
10[Unit]
11Description=Time & Date Service
608da9e9 12Documentation=man:systemd-timedated.service(8) man:localtime(5)
16a5d412 13Documentation=https://www.freedesktop.org/wiki/Software/systemd/timedated
f401e48c
LP
14
15[Service]
16ExecStart=@rootlibexecdir@/systemd-timedated
f401e48c 17BusName=org.freedesktop.timedate1
c2fc2c25 18WatchdogSec=3min
0c28d51a 19CapabilityBoundingSet=CAP_SYS_TIME
d99a7052 20PrivateTmp=yes
c7fb922d 21ProtectSystem=strict
1b8689f9 22ProtectHome=yes
0c28d51a
LP
23ProtectControlGroups=yes
24ProtectKernelTunables=yes
b6c7278c 25ProtectKernelModules=yes
40652ca4 26MemoryDenyWriteExecute=yes
0c28d51a 27RestrictRealtime=yes
3c19d0b4 28RestrictNamespaces=yes
0c28d51a 29RestrictAddressFamilies=AF_UNIX
6489ccfe 30SystemCallFilter=~@cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
7f396e5f 31SystemCallArchitectures=native
bff8f254 32LockPersonality=yes
0a9b166b 33IPAddressDeny=any
c7fb922d 34ReadWritePaths=/etc