diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml
index b8843f1ea0..19c7b26bce 100644
--- a/man/systemd.exec.xml
+++ b/man/systemd.exec.xml
@@ -1135,9 +1135,13 @@ BindReadOnlyPaths=/var/lib/systemd</programlisting>
         <listitem><para>Takes a boolean argument. When set, sets up a new UTS namespace for the executed
         processes. In addition, changing hostname or domainname is prevented. Defaults to off.</para>
 
-        <para>Note that the implementation of this setting might be impossible (for example if UTS namespaces are not
-        available), and the unit should be written in a way that does not solely rely on this setting for
-        security.</para></listitem>
+        <para>Note that the implementation of this setting might be impossible (for example if UTS namespaces
+        are not available), and the unit should be written in a way that does not solely rely on this setting
+        for security.</para>
+
+        <para>Note that when this option is enabled for a service hostname changes no longer propagate from
+        the system into the service, it is hence not suitable for services that need to take notice of system
+        hostname changes dynamically.</para></listitem>
       </varlistentry>
 
       <varlistentry>
diff --git a/units/systemd-journald.service.in b/units/systemd-journald.service.in
index 1807d73c68..4684f095c0 100644
--- a/units/systemd-journald.service.in
+++ b/units/systemd-journald.service.in
@@ -23,7 +23,6 @@ IPAddressDeny=any
 LockPersonality=yes
 MemoryDenyWriteExecute=yes
 NoNewPrivileges=yes
-ProtectHostname=yes
 Restart=always
 RestartSec=0
 RestrictAddressFamilies=AF_UNIX AF_NETLINK
diff --git a/units/systemd-networkd.service.in b/units/systemd-networkd.service.in
index 5da0e1e330..472ef045de 100644
--- a/units/systemd-networkd.service.in
+++ b/units/systemd-networkd.service.in
@@ -27,7 +27,6 @@ MemoryDenyWriteExecute=yes
 NoNewPrivileges=yes
 ProtectControlGroups=yes
 ProtectHome=yes
-ProtectHostname=yes
 ProtectKernelModules=yes
 ProtectSystem=strict
 Restart=on-failure
diff --git a/units/systemd-resolved.service.in b/units/systemd-resolved.service.in
index eac3f31012..3144b70063 100644
--- a/units/systemd-resolved.service.in
+++ b/units/systemd-resolved.service.in
@@ -30,7 +30,6 @@ PrivateDevices=yes
 PrivateTmp=yes
 ProtectControlGroups=yes
 ProtectHome=yes
-ProtectHostname=yes
 ProtectKernelModules=yes
 ProtectKernelTunables=yes
 ProtectSystem=strict