From ba679b8d567e2e5b347865800da421a1bb87df75 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Fri, 17 Dec 2021 12:19:25 +0000 Subject: [PATCH] logind: add a comment with a reminder why we don't use ProtrectProc= Follow-up for https://github.com/systemd/systemd/pull/21785 --- units/systemd-logind.service.in | 1 + 1 file changed, 1 insertion(+) diff --git a/units/systemd-logind.service.in b/units/systemd-logind.service.in index b3b9ff36b18..042ea75d7ab 100644 --- a/units/systemd-logind.service.in +++ b/units/systemd-logind.service.in @@ -37,6 +37,7 @@ LockPersonality=yes MemoryDenyWriteExecute=yes NoNewPrivileges=yes PrivateTmp=yes +# We don't use ProtectProc= since we need to look for usernames and tty for wall messages ProtectClock=yes ProtectControlGroups=yes ProtectHome=yes