1 # This file is part of systemd.
3 # systemd is free software; you can redistribute it and/or modify it
4 # under the terms of the GNU Lesser General Public License as published by
5 # the Free Software Foundation; either version 2.1 of the License, or
6 # (at your option) any later version.
9 Description=Network Time Synchronization
10 Documentation=man:systemd-timesyncd.service(8)
11 ConditionCapability=CAP_SYS_TIME
12 ConditionVirtualization=!container
13 DefaultDependencies=no
14 After=systemd-remount-fs.service systemd-sysusers.service
15 Before=time-sync.target sysinit.target shutdown.target
16 Conflicts=shutdown.target
17 Wants=time-sync.target
23 ExecStart=!!@rootlibexecdir@/systemd-timesyncd
26 CapabilityBoundingSet=CAP_SYS_TIME
27 AmbientCapabilities=CAP_SYS_TIME
32 ProtectControlGroups=yes
33 ProtectKernelTunables=yes
34 ProtectKernelModules=yes
35 MemoryDenyWriteExecute=yes
37 RestrictNamespaces=yes
38 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
39 SystemCallFilter=~@cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
40 SystemCallArchitectures=native
41 StateDirectory=systemd/timesync
44 WantedBy=sysinit.target