]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-hostnamed.service.in
Revert "man: mention that systemctl is-active or is-failed do not load units"
[thirdparty/systemd.git] / units / systemd-hostnamed.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
7640a5de
LP
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
7640a5de
LP
8# (at your option) any later version.
9
7640a5de
LP
10[Unit]
11Description=Hostname Service
29f4f511 12Documentation=man:systemd-hostnamed.service(8) man:hostname(5) man:machine-info(5)
16a5d412 13Documentation=https://www.freedesktop.org/wiki/Software/systemd/hostnamed
7640a5de
LP
14
15[Service]
16ExecStart=@rootlibexecdir@/systemd-hostnamed
7640a5de 17BusName=org.freedesktop.hostname1
c2fc2c25 18WatchdogSec=3min
0c28d51a 19CapabilityBoundingSet=CAP_SYS_ADMIN
d99a7052
LP
20PrivateTmp=yes
21PrivateDevices=yes
f21a71a9 22PrivateNetwork=yes
c7fb922d 23ProtectSystem=strict
1b8689f9 24ProtectHome=yes
0c28d51a
LP
25ProtectControlGroups=yes
26ProtectKernelTunables=yes
b6c7278c 27ProtectKernelModules=yes
40652ca4 28MemoryDenyWriteExecute=yes
0c28d51a 29RestrictRealtime=yes
3c19d0b4 30RestrictNamespaces=yes
0c28d51a 31RestrictAddressFamilies=AF_UNIX
6489ccfe 32SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
7f396e5f 33SystemCallArchitectures=native
bff8f254 34LockPersonality=yes
0a9b166b 35IPAddressDeny=any
c7fb922d 36ReadWritePaths=/etc