name : systemd-coredump@.service # SPDX-License-Identifier: LGPL-2.1+ # # This file is part of systemd. # # systemd is free software; you can redistribute it and/or modify it # under the terms of the GNU Lesser General Public License as published by # the Free Software Foundation; either version 2.1 of the License, or # (at your option) any later version. [Unit] Description=Process Core Dump Documentation=man:systemd-coredump(8) DefaultDependencies=no Conflicts=shutdown.target After=systemd-remount-fs.service systemd-journald.socket Requires=systemd-journald.socket Before=shutdown.target [Service] ExecStart=-/usr/lib/systemd/systemd-coredump Nice=9 OOMScoreAdjust=500 RuntimeMaxSec=5min PrivateTmp=yes PrivateDevices=yes PrivateNetwork=yes ProtectSystem=strict ProtectHome=yes ProtectControlGroups=yes ProtectKernelTunables=yes ProtectKernelModules=yes MemoryDenyWriteExecute=yes RestrictRealtime=yes RestrictNamespaces=yes RestrictAddressFamilies=AF_UNIX RestrictSUIDSGID=yes SystemCallFilter=@system-service SystemCallErrorNumber=EPERM SystemCallArchitectures=native LockPersonality=yes StateDirectory=systemd/coredump