]> git.ipfire.org Git - thirdparty/systemd.git/blame - units/systemd-timedated.service.in
hashmap: always set key output argument of internal_hashmap_first_key_and_value()
[thirdparty/systemd.git] / units / systemd-timedated.service.in
CommitLineData
a7df2d1e
ZJS
1# SPDX-License-Identifier: LGPL-2.1+
2#
f401e48c
LP
3# This file is part of systemd.
4#
5# systemd is free software; you can redistribute it and/or modify it
5430f7f2
LP
6# under the terms of the GNU Lesser General Public License as published by
7# the Free Software Foundation; either version 2.1 of the License, or
f401e48c
LP
8# (at your option) any later version.
9
f401e48c
LP
10[Unit]
11Description=Time & Date Service
608da9e9 12Documentation=man:systemd-timedated.service(8) man:localtime(5)
16a5d412 13Documentation=https://www.freedesktop.org/wiki/Software/systemd/timedated
f401e48c
LP
14
15[Service]
f401e48c 16BusName=org.freedesktop.timedate1
0c28d51a 17CapabilityBoundingSet=CAP_SYS_TIME
3ca9940c
LP
18ExecStart=@rootlibexecdir@/systemd-timedated
19IPAddressDeny=any
20LockPersonality=yes
21MemoryDenyWriteExecute=yes
22NoNewPrivileges=yes
d99a7052 23PrivateTmp=yes
0c28d51a 24ProtectControlGroups=yes
3ca9940c 25ProtectHome=yes
b6c7278c 26ProtectKernelModules=yes
3ca9940c
LP
27ProtectKernelTunables=yes
28ProtectSystem=strict
29ReadWritePaths=/etc
0c28d51a 30RestrictAddressFamilies=AF_UNIX
3ca9940c
LP
31RestrictNamespaces=yes
32RestrictRealtime=yes
7f396e5f 33SystemCallArchitectures=native
3ca9940c
LP
34SystemCallErrorNumber=EPERM
35SystemCallFilter=@system-service @clock
36WatchdogSec=3min