unit: enable DynamicUser= for journal-upload

diff --git a/units/systemd-journal-upload.service.in b/units/systemd-journal-upload.service.in
index 98a4b2bb7af15e62c860d6dcad46366a66a59187..b666ef3568223bcbdc9ec3158b3eb44713c3f73f 100644 (file)
--- a/units/systemd-journal-upload.service.in
+++ b/units/systemd-journal-upload.service.in
@@ -14,11 +14,10 @@ After=network-online.target
 [Service]
 ExecStart=@rootlibexecdir@/systemd-journal-upload --save-state
 User=systemd-journal-upload
+DynamicUser=yes
 SupplementaryGroups=systemd-journal
 WatchdogSec=3min
-PrivateTmp=yes
 PrivateDevices=yes
-ProtectSystem=strict
 ProtectHome=yes
 ProtectControlGroups=yes
 ProtectKernelTunables=yes