tree-wide: drop locale.h when locale-util.h is included

[thirdparty/systemd.git] / units / systemd-localed.service.in

diff --git a/units/systemd-localed.service.in b/units/systemd-localed.service.in
index 01e0703d0e207c7da718feb6dd26f2d21becca24..f9a81fa8ddd58058f08c0a92c8d34e89d9180a37 100644 (file)
--- a/units/systemd-localed.service.in
+++ b/units/systemd-localed.service.in
@@ -25,6 +25,7 @@ PrivateNetwork=yes
 PrivateTmp=yes
 ProtectControlGroups=yes
 ProtectHome=yes
+ProtectHostname=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
 ProtectSystem=strict
@@ -32,7 +33,8 @@ ReadWritePaths=/etc
 RestrictAddressFamilies=AF_UNIX
 RestrictNamespaces=yes
 RestrictRealtime=yes
+RestrictSUIDSGID=yes
 SystemCallArchitectures=native
 SystemCallErrorNumber=EPERM
 SystemCallFilter=@system-service
-WatchdogSec=3min
+@SERVICE_WATCHDOG@