units/systemd-coredump@.service.in

   1 #  This file is part of systemd.
   2 #
   3 #  systemd is free software; you can redistribute it and/or modify it
   4 #  under the terms of the GNU Lesser General Public License as published by
   5 #  the Free Software Foundation; either version 2.1 of the License, or
   6 #  (at your option) any later version.
   7
   8 [Unit]
   9 Description=Process Core Dump
  10 Documentation=man:systemd-coredump(8)
  11 DefaultDependencies=no
  12 Conflicts=shutdown.target
  13 After=systemd-remount-fs.service systemd-journald.socket
  14 Requires=systemd-journald.socket
  15 Before=shutdown.target
  16
  17 [Service]
  18 ExecStart=-@rootlibexecdir@/systemd-coredump
  19 Nice=9
  20 OOMScoreAdjust=500
  21 RuntimeMaxSec=5min
  22 PrivateTmp=yes
  23 PrivateDevices=yes
  24 PrivateNetwork=yes
  25 ProtectSystem=strict
  26 ProtectHome=yes
  27 ProtectControlGroups=yes
  28 ProtectKernelTunables=yes
  29 ProtectKernelModules=yes
  30 MemoryDenyWriteExecute=yes
  31 RestrictRealtime=yes
  32 RestrictNamespaces=yes
  33 RestrictAddressFamilies=AF_UNIX
  34 SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
  35 SystemCallArchitectures=native
  36 StateDirectory=systemd/coredump