units: turn on RestrictSUIDSGID= in most of our long-running daemons

[thirdparty/systemd.git] / units / systemd-random-seed.service.in

diff --git a/units/systemd-random-seed.service.in b/units/systemd-random-seed.service.in
index 0c21a04842c9745b1d5c99f16f76b67cc651883e..8903ee896cd19d3087a250af1d21da3a737eb547 100644 (file)
--- a/units/systemd-random-seed.service.in
+++ b/units/systemd-random-seed.service.in
@@ -1,3 +1,5 @@
+#  SPDX-License-Identifier: LGPL-2.1+
+#
 #  This file is part of systemd.
 #
 #  systemd is free software; you can redistribute it and/or modify it
@@ -7,15 +9,17 @@
 
 [Unit]
 Description=Load/Save Random Seed
-Documentation=man:systemd-random-seed-load.service(8) man:random(4)
+Documentation=man:systemd-random-seed.service(8) man:random(4)
 DefaultDependencies=no
 RequiresMountsFor=@RANDOM_SEED@
 Conflicts=shutdown.target
-After=systemd-readahead-collect.service systemd-readahead-replay.service systemd-remount-fs.service
+After=systemd-remount-fs.service
 Before=sysinit.target shutdown.target
+ConditionVirtualization=!container
 
 [Service]
 Type=oneshot
 RemainAfterExit=yes
 ExecStart=@rootlibexecdir@/systemd-random-seed load
 ExecStop=@rootlibexecdir@/systemd-random-seed save
+TimeoutSec=30s