units: add ProtectClock=yes
authorTopi Miettinen <toiwoton@gmail.com>
Thu, 2 Apr 2020 18:18:11 +0000 (21:18 +0300)
committerLennart Poettering <lennart@poettering.net>
Tue, 7 Apr 2020 13:37:14 +0000 (15:37 +0200)
commitcabc1c6d7adae658a2966a4b02a6faabb803e92b
tree97d713454ae4cffbf17b841480df3008bf3f2752
parentc3362c2f97115d7eecac556cf70034992c46221d
units: add ProtectClock=yes

Add `ProtectClock=yes` to systemd units. Since it implies certain
`DeviceAllow=` rules, make sure that the units have `DeviceAllow=` rules so
they are still able to access other devices. Exclude timesyncd and timedated.
units/systemd-journal-remote.service.in
units/systemd-journald.service.in
units/systemd-logind.service.in
units/systemd-networkd.service.in
units/systemd-resolved.service.in
units/systemd-udevd.service.in