1 2 3 4 5 6 7
# The "trusted" profile for services, i.e. no restrictions are applied [Service] MountAPIVFS=yes BindPaths=/run BindReadOnlyPaths=/etc/machine-id BindReadOnlyPaths=/etc/resolv.conf