mirror of
https://github.com/morgan9e/systemd
synced 2026-04-15 00:47:10 +09:00
journald: implement socket forwarding
This commit adds a new way of forwarding journal messages - forwarding over a socket. The socket can be any of AF_INET, AF_INET6, AF_UNIUX or AF_VSOCK. The address to connect to is retrieved from the "journald.forward_address" credential. It can also be specified in systemd-journald's unit file with ForwardAddress=
This commit is contained in:
@@ -29,6 +29,7 @@ IgnoreOnIsolate=yes
|
||||
DeviceAllow=char-* rw
|
||||
ExecStart={{LIBEXECDIR}}/systemd-journald
|
||||
FileDescriptorStoreMax=4224
|
||||
ImportCredential=journal.*
|
||||
IPAddressDeny=any
|
||||
LockPersonality=yes
|
||||
MemoryDenyWriteExecute=yes
|
||||
@@ -37,7 +38,7 @@ OOMScoreAdjust=-250
|
||||
ProtectClock=yes
|
||||
Restart=always
|
||||
RestartSec=0
|
||||
RestrictAddressFamilies=AF_UNIX AF_NETLINK
|
||||
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_VSOCK AF_INET AF_INET6
|
||||
RestrictNamespaces=yes
|
||||
RestrictRealtime=yes
|
||||
RestrictSUIDSGID=yes
|
||||
|
||||
Reference in New Issue
Block a user