JezK
Edit File: systemd-coredump@.service
# SPDX-License-Identifier: LGPL-2.1-or-later # # This file is part of systemd. # # systemd is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or # (at your option) any later version. [Unit] Description=Process Core Dump Documentation=man:systemd-coredump(8) DefaultDependencies=no Conflicts=shutdown.target After=systemd-journald.socket Requires=systemd-journald.socket Before=shutdown.target [Service] ExecStart=-/usr/lib/systemd/systemd-coredump IPAddressDeny=any LockPersonality=yes MemoryDenyWriteExecute=yes Nice=9 NoNewPrivileges=yes OOMScoreAdjust=500 PrivateDevices=yes PrivateNetwork=yes PrivateTmp=yes ProtectControlGroups=yes ProtectHome=yes ProtectHostname=yes ProtectKernelModules=yes ProtectKernelTunables=yes ProtectKernelLogs=yes ProtectSystem=strict RestrictAddressFamilies=AF_UNIX RestrictRealtime=yes RestrictSUIDSGID=yes RuntimeMaxSec=5min StateDirectory=systemd/coredump SystemCallArchitectures=native SystemCallErrorNumber=EPERM SystemCallFilter=@system-service @mount