units/systemd-journalctl@.service: run with DynamicUser=yes

Follow-up for a109189fab

This follows the existing practice for
systemd-journal-{upload,gatewayd}.service,
as I think allocating a full-blown user
specifically for this purpose is an overkill.
And with DynamicUser=yes we can also take
advantage of implied sandboxing.
This commit is contained in:
Mike Yuan
2026-02-23 10:21:56 +01:00
parent 2619656950
commit 2afe8e28f8
4 changed files with 4 additions and 6 deletions
+1 -2
View File
@@ -5,5 +5,4 @@
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
g systemd-journal {{SYSTEMD_JOURNAL_GID}} -
u! systemd-journal {{SYSTEMD_JOURNAL_UID}} "systemd Journal"
g systemd-journal {{SYSTEMD_JOURNAL_GID}} -