2022-05-17 08:47:45 +00:00
|
|
|
[Unit]
|
|
|
|
|
Description=System Logging Service
|
|
|
|
|
;Requires=syslog.socket
|
2023-11-07 12:02:57 +00:00
|
|
|
Wants=network.target network-online.target
|
|
|
|
|
After=network.target network-online.target
|
2022-05-17 08:47:45 +00:00
|
|
|
Documentation=man:rsyslogd(8)
|
|
|
|
|
Documentation=https://www.rsyslog.com/doc/
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Type=notify
|
|
|
|
|
EnvironmentFile=-/etc/sysconfig/rsyslog
|
|
|
|
|
ExecStart=/usr/sbin/rsyslogd -n $SYSLOGD_OPTIONS
|
|
|
|
|
ExecReload=/usr/bin/kill -HUP $MAINPID
|
|
|
|
|
UMask=0066
|
|
|
|
|
StandardOutput=null
|
|
|
|
|
Restart=on-failure
|
2023-11-07 12:02:57 +00:00
|
|
|
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
|
|
|
|
|
RestrictNamespaces=net
|
|
|
|
|
NoNewPrivileges=yes
|
|
|
|
|
ProtectControlGroups=yes
|
|
|
|
|
ProtectHome=read-only
|
|
|
|
|
ProtectKernelModules=yes
|
|
|
|
|
ProtectKernelTunables=yes
|
|
|
|
|
RestrictSUIDSGID=yes
|
|
|
|
|
SystemCallArchitectures=native
|
|
|
|
|
SystemCallFilter=~@clock @debug @module @raw-io @reboot @swap @cpu-emulation @obsolete
|
|
|
|
|
LockPersonality=yes
|
|
|
|
|
MemoryDenyWriteExecute=yes
|
2022-05-17 08:47:45 +00:00
|
|
|
|
|
|
|
|
# Increase the default a bit in order to allow many simultaneous
|
|
|
|
|
# files to be monitored, we might need a lot of fds.
|
|
|
|
|
LimitNOFILE=16384
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
|
|
|
|
;Alias=syslog.service
|
