From d3c7cfad226f0d1b74247d9b97fb7787a50cf0a4 Mon Sep 17 00:00:00 2001 From: Wayne Davison Date: Wed, 17 Jun 2020 09:31:48 -0700 Subject: [PATCH] Be a little more explicit with override info. --- packaging/systemd/rsync.service | 5 ++++- packaging/systemd/rsync@.service | 5 ++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/packaging/systemd/rsync.service b/packaging/systemd/rsync.service index ea978141..6d1031fd 100644 --- a/packaging/systemd/rsync.service +++ b/packaging/systemd/rsync.service @@ -16,7 +16,10 @@ RestartSec=1 # # So let's assume some extra security is more than welcome here. We do full # system protection (which makes it read-only) and hide users' homes and -# devices. See systemd.unit(5) and search for "drop-in" to override. +# devices. To override these defaults, it's best to do so in the drop-in +# directory, often done via `systemctl edit rsync.service`. The file needs +# just the bare minimum of the right [heading] and override values. +# See systemd.unit(5) and search for "drop-in" for full details. ProtectSystem=full ProtectHome=on diff --git a/packaging/systemd/rsync@.service b/packaging/systemd/rsync@.service index 2508c93e..e1f48da8 100644 --- a/packaging/systemd/rsync@.service +++ b/packaging/systemd/rsync@.service @@ -17,7 +17,10 @@ StandardError=journal # # So let's assume some extra security is more than welcome here. We do full # system protection (which makes it read-only) and hide users' homes and -# devices. See systemd.unit(5) and search for "drop-in" to override. +# devices. To override these defaults, it's best to do so in the drop-in +# directory, often done via `systemctl edit rsync@.service`. The file needs +# just the bare minimum of the right [heading] and override values. +# See systemd.unit(5) and search for "drop-in" for full details. ProtectSystem=full ProtectHome=on -- 2.47.2