| 123456789101112131415161718192021222324252627 |
- [Unit]
- Description=Rotate log files
- Documentation=man:logrotate(8) man:logrotate.conf(5)
- RequiresMountsFor=/var/log
- ConditionACPower=true
- [Service]
- Type=oneshot
- ExecStart=/usr/sbin/logrotate /etc/logrotate.conf
- # performance options
- Nice=19
- IOSchedulingClass=best-effort
- IOSchedulingPriority=7
- # hardening options
- # details: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
- # no ProtectHome for userdir logs
- # no PrivateNetwork for mail deliviery
- # no ProtectKernelTunables for working SELinux with systemd older than 235
- MemoryDenyWriteExecute=true
- PrivateDevices=true
- PrivateTmp=true
- ProtectControlGroups=true
- ProtectKernelModules=true
- ProtectSystem=full
- RestrictRealtime=true
|
