1 # SPDX-License-Identifier: LGPL-2.1+
3 # This file is part of systemd.
5 # systemd is free software; you can redistribute it and/or modify it
6 # under the terms of the GNU Lesser General Public License as published by
7 # the Free Software Foundation; either version 2.1 of the License, or
8 # (at your option) any later version.
11 Description=Journal Service for Namespace %i
12 Documentation=man:systemd-journald.service(8) man:journald.conf(5)
13 Requires=systemd-journald@%i.socket systemd-journald-varlink@%i.socket
14 After=systemd-journald@%i.socket systemd-journald-varlink@%i.socket
17 CapabilityBoundingSet=CAP_SYS_ADMIN CAP_DAC_OVERRIDE CAP_SYS_PTRACE CAP_CHOWN CAP_DAC_READ_SEARCH CAP_FOWNER CAP_SETUID CAP_SETGID CAP_MAC_OVERRIDE
19 ExecStart=@rootlibexecdir@/systemd-journald %i
20 FileDescriptorStoreMax=4224
24 LogsDirectory=journal/%m.%i
25 LogsDirectoryMode=02755
26 MemoryDenyWriteExecute=yes
28 RestrictAddressFamilies=AF_UNIX AF_NETLINK
29 RestrictNamespaces=yes
32 RuntimeDirectory=systemd/journal.%i
33 RuntimeDirectoryPreserve=yes
34 Sockets=systemd-journald@%i.socket
36 SystemCallArchitectures=native
37 SystemCallErrorNumber=EPERM
38 SystemCallFilter=@system-service
42 # If there are many split up journal files we need a lot of fds to access them
44 LimitNOFILE=@HIGH_RLIMIT_NOFILE@