summaryrefslogtreecommitdiff
path: root/units
diff options
context:
space:
mode:
authorDaan De Meyer <daan.j.demeyer@gmail.com>2023-01-06 14:11:57 +0100
committerGitHub <noreply@github.com>2023-01-06 14:11:57 +0100
commite0ff0ee8f9c1aaa642ca90e74ebda795ea265e8b (patch)
treed9f64360cfd4f24e095b003ad9a95c2db9086dd8 /units
parent2d935bbd22daf851cfb684812bb9056ea3538e5c (diff)
parent17eab9467dab008f4a1b714cbac571a8e2400d6a (diff)
downloadsystemd-e0ff0ee8f9c1aaa642ca90e74ebda795ea265e8b.tar.gz
Merge pull request #25947 from poettering/resolved-dns-creds
resolved: add support for reading DNS config from kernel cmdline + service credentials
Diffstat (limited to 'units')
-rw-r--r--units/systemd-resolved.service.in3
1 files changed, 2 insertions, 1 deletions
diff --git a/units/systemd-resolved.service.in b/units/systemd-resolved.service.in
index 621fe34224..b4227ffd42 100644
--- a/units/systemd-resolved.service.in
+++ b/units/systemd-resolved.service.in
@@ -30,7 +30,6 @@ MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
PrivateDevices=yes
PrivateTmp=yes
-ProtectProc=invisible
ProtectClock=yes
ProtectControlGroups=yes
ProtectHome=yes
@@ -51,6 +50,8 @@ SystemCallErrorNumber=EPERM
SystemCallFilter=@system-service
Type=notify
User=systemd-resolve
+LoadCredential=network.dns
+LoadCredential=network.search_domains
{{SERVICE_WATCHDOG}}
[Install]