units/systemd-journalctl@.service: run with DynamicUser=yes
Follow-up for a109189fab
This follows the existing practice for
systemd-journal-{upload,gatewayd}.service,
as I think allocating a full-blown user
specifically for this purpose is an overkill.
And with DynamicUser=yes we can also take
advantage of implied sandboxing.
This commit is contained in:
@@ -5,5 +5,4 @@
|
||||
# the Free Software Foundation; either version 2.1 of the License, or
|
||||
# (at your option) any later version.
|
||||
|
||||
g systemd-journal {{SYSTEMD_JOURNAL_GID}} -
|
||||
u! systemd-journal {{SYSTEMD_JOURNAL_UID}} "systemd Journal"
|
||||
g systemd-journal {{SYSTEMD_JOURNAL_GID}} -
|
||||
|
||||
Reference in New Issue
Block a user