units/systemd-coredump@.service.in

   1 #  This file is part of systemd.
   2 #
   3 #  systemd is free software; you can redistribute it and/or modify it
   4 #  under the terms of the GNU Lesser General Public License as published by
   5 #  the Free Software Foundation; either version 2.1 of the License, or
   6 #  (at your option) any later version.
   7
   8 [Unit]
   9 Description=Process Core Dump
  10 Documentation=man:systemd-coredump(8)
  11 DefaultDependencies=no
  12 RequiresMountsFor=/var/lib/systemd/coredump
  13 Conflicts=shutdown.target
  14 After=systemd-remount-fs.service systemd-journald.socket
  15 Requires=systemd-journald.socket
  16 Before=shutdown.target
  17
  18 [Service]
  19 ExecStart=-@rootlibexecdir@/systemd-coredump
  20 Nice=9
  21 OOMScoreAdjust=500
  22 RuntimeMaxSec=5min
  23 PrivateTmp=yes
  24 PrivateDevices=yes
  25 PrivateNetwork=yes
  26 ProtectSystem=strict
  27 ProtectHome=yes
  28 ProtectControlGroups=yes
  29 ProtectKernelTunables=yes
  30 ProtectKernelModules=yes
  31 MemoryDenyWriteExecute=yes
  32 RestrictRealtime=yes
  33 RestrictNamespaces=yes
  34 RestrictAddressFamilies=AF_UNIX
  35 SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
  36 SystemCallArchitectures=native
  37 StateDirectory=systemd/coredump