Merging upstream version 4.23.0.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 463 insertions, 104 deletions

diff --git a/po/de/man5/systemd.exec.5.po b/po/de/man5/systemd.exec.5.po
index 6c8ce6a0..8738e4e0 100644
--- a/po/de/man5/systemd.exec.5.po
+++ b/po/de/man5/systemd.exec.5.po
@@ -1,12 +1,12 @@
 # German translation of manpages
 # This file is distributed under the same license as the manpages-l10n package.
 # Copyright © of this file:
-# Helge Kreutzmann <debian@helgefjell.de>, 2018-2023.
+# Helge Kreutzmann <debian@helgefjell.de>, 2018-2024.
 msgid ""
 msgstr ""
-"Project-Id-Version: manpages-l10n 4.21.0\n"
-"POT-Creation-Date: 2024-03-01 17:10+0100\n"
-"PO-Revision-Date: 2024-03-02 16:22+0100\n"
+"Project-Id-Version: manpages-l10n 4.22.0\n"
+"POT-Creation-Date: 2024-06-01 06:27+0200\n"
+"PO-Revision-Date: 2024-06-07 19:15+0200\n"
 "Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
 "Language-Team: German <debian-l10n-german@lists.debian.org>\n"
 "Language: de\n"
@@ -23,7 +23,7 @@ msgid "SYSTEMD\\&.EXEC"
 msgstr "SYSTEMD\\&.EXEC"
 
 #. type: TH
-#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed
 #, no-wrap
 msgid "systemd 255"
 msgstr "systemd 255"
@@ -244,6 +244,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 250\\&."
 msgstr "Hinzugefügt in Version 250\\&."
 
@@ -290,8 +291,8 @@ msgid "I<RootDirectory=>"
 msgstr "I<RootDirectory=>"
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
 msgid ""
 "Takes a directory path relative to the host\\*(Aqs root directory (i\\&."
 "e\\&. the root of the system running the service manager)\\&. Sets the root "
@@ -458,12 +459,13 @@ msgid ""
 "This option is only available for system services and is not supported for "
 "services running in per-user instances of the service manager\\&."
 msgstr ""
-"Diese Option ist nur für Systemdienste verfügbar und wird nicht für Dienste, "
-"die in benutzerbezogenene Instanzen des Diensteverwalters laufen, "
-"unterstützt\\&."
+"Diese Option ist nur für Systemdienste verfügbar und wird nicht für Dienste "
+"unterstützt, die in benutzerbezogenen Instanzen des Diensteverwalters "
+"laufen\\&."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 233\\&."
 msgstr "Hinzugefügt in Version 233\\&."
 
@@ -510,6 +512,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 247\\&."
 msgstr "Hinzugefügt in Version 247\\&."
 
@@ -541,6 +544,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "To make sure making ephemeral copies can be made efficiently, the root "
 "directory or root image should be located on the same filesystem as /var/lib/"
@@ -562,6 +566,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 254\\&."
 msgstr "Hinzugefügt in Version 254\\&."
 
@@ -629,6 +634,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 246\\&."
 msgstr "Hinzugefügt in Version 246\\&."
 
@@ -824,7 +830,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
 "In order to allow propagating mounts at runtime in a safe manner, /run/"
 "systemd/propagate/ on the host will be used to set up new mounts, and /run/"
@@ -847,14 +853,14 @@ msgstr "I<ProtectProc=>"
 #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
 #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
-"Takes one of \"noaccess\", \"invisible\", \"ptraceable\" or "
-"\"default\" (which it defaults to)\\&. When set, this controls the "
-"\"hidepid=\" mount option of the \"procfs\" instance for the unit that "
-"controls which directories with process metainformation (/proc/I<PID>) are "
-"visible and accessible: when set to \"noaccess\" the ability to access most "
-"of other users\\*(Aq process metadata in /proc/ is taken away for processes "
-"of the service\\&. When set to \"invisible\" processes owned by other users "
-"are hidden from /proc/\\&. If \"ptraceable\" all processes that cannot be "
+"Takes one of \"noaccess\", \"invisible\", \"ptraceable\" or \"default\" "
+"(which it defaults to)\\&. When set, this controls the \"hidepid=\" mount "
+"option of the \"procfs\" instance for the unit that controls which "
+"directories with process metainformation (/proc/I<PID>) are visible and "
+"accessible: when set to \"noaccess\" the ability to access most of other "
+"users\\*(Aq process metadata in /proc/ is taken away for processes of the "
+"service\\&. When set to \"invisible\" processes owned by other users are "
+"hidden from /proc/\\&. If \"ptraceable\" all processes that cannot be "
 "B<ptrace()>\\*(Aqed by a process are hidden to it\\&. If \"default\" no "
 "restrictions on /proc/ access or visibility are made\\&. For further details "
 "see \\m[blue]B<The /proc Filesystem>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&. It is "
@@ -868,18 +874,18 @@ msgid ""
 "be used for services that need to access metainformation about other "
 "users\\*(Aq processes\\&. This option implies I<MountAPIVFS=>\\&."
 msgstr ""
-"Akzeptiert entweder »noaccess«, »invisible«, »ptraceable« oder "
-"»default« (die Vorgabe)\\&. Wenn gesetzt, steuert dies die Einhängeoption "
-"»hidepid=« der »procfs«-Instanz für die Unit, die steuert, welche "
-"Verzeichnisse mit Prozessmetainformationen (/proc/I<PID>) sichtbar und "
-"zugreifbar sind: wird dies auf »noaccess« gesetzt, dann wird die Fähigkeit, "
-"auf die meisten Prozessmetadaten anderer Prozesse in /proc/ zuzugreifen, für "
-"Prozesse des Dienstes entfernt\\&. Wird dies auf »invisible« gesetzt, dann "
-"werden die meisten Prozesse, die anderen Benutzern gehören, in /proc/ "
-"versteckt\\&. Bei »ptraceable« werden alle Prozesse, die nicht mit "
-"B<ptrace()> untersucht werden können, davor versteckt\\&. Bei »default« "
-"werden keine Einschränkungen beim Zugriff auf /proc/ oder dessen "
-"Sichtbarkeit vorgenommen\\&. Für weitere Details siehe \\m[blue]B<Das /proc-"
+"Akzeptiert entweder »noaccess«, »invisible«, »ptraceable« oder »default« "
+"(die Vorgabe)\\&. Wenn gesetzt, steuert dies die Einhängeoption »hidepid=« "
+"der »procfs«-Instanz für die Unit, die steuert, welche Verzeichnisse mit "
+"Prozessmetainformationen (/proc/I<PID>) sichtbar und zugreifbar sind: wird "
+"dies auf »noaccess« gesetzt, dann wird die Fähigkeit, auf die meisten "
+"Prozessmetadaten anderer Prozesse in /proc/ zuzugreifen, für Prozesse des "
+"Dienstes entfernt\\&. Wird dies auf »invisible« gesetzt, dann werden die "
+"meisten Prozesse, die anderen Benutzern gehören, in /proc/ versteckt\\&. Bei "
+"»ptraceable« werden alle Prozesse, die nicht mit B<ptrace()> untersucht "
+"werden können, davor versteckt\\&. Bei »default« werden keine "
+"Einschränkungen beim Zugriff auf /proc/ oder dessen Sichtbarkeit "
+"vorgenommen\\&. Für weitere Details siehe \\m[blue]B<Das /proc-"
 "Dateisystem>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&. Es wird im Allgemeinen "
 "empfohlen, die meisten Systemdienste so auszuführen, dass diese Option auf "
 "»invisible« gesetzt ist\\&. Diese Option wird mittels "
@@ -1174,6 +1180,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "A read-only OverlayFS will be set up on top of /usr/ and /opt/ hierarchies "
 "for sysext images and /etc/ hierarchy for confext images\\&. The order in "
@@ -1225,6 +1232,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Each sysext image must carry a /usr/lib/extension-release\\&.d/extension-"
 "release\\&.IMAGE file while each confext image must carry a /etc/extension-"
@@ -1246,6 +1254,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 248\\&."
 msgstr "Hinzugefügt in Version 248\\&."
 
@@ -1272,6 +1281,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "A read-only OverlayFS will be set up on top of /usr/ and /opt/ hierarchies "
 "for sysext images and /etc/ hierarchy for confext images\\&. The order in "
@@ -1316,6 +1326,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Each sysext directory must contain a /usr/lib/extension-release\\&.d/"
 "extension-release\\&.IMAGE file while each confext directory must carry a /"
@@ -1342,6 +1353,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 251\\&."
 msgstr "Hinzugefügt in Version 251\\&."
 
@@ -1607,6 +1619,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 232\\&."
 msgstr "Hinzugefügt in Version 232\\&."
 
@@ -1642,11 +1655,12 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "I<SetLoginEnvironment=>"
 msgstr "I<SetLoginEnvironment=>"
 
 #. type: Plain text
-#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Takes a boolean parameter that controls whether to set I<$HOME>, "
 "I<$LOGNAME>, and I<$SHELL> environment variables\\&. If unset, this is "
@@ -1669,6 +1683,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 255\\&."
 msgstr "Hinzugefügt in Version 255\\&."
 
@@ -1934,6 +1949,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 229\\&."
 msgstr "Hinzugefügt in Version 229\\&."
 
@@ -1952,6 +1968,7 @@ msgstr "I<NoNewPrivileges=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If true, ensures that the service process and "
 "all its children can never gain new privileges through B<execve()> (e\\&."
@@ -1992,6 +2009,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 187\\&."
 msgstr "Hinzugefügt in Version 187\\&."
 
@@ -2060,6 +2078,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 209\\&."
 msgstr "Hinzugefügt in Version 209\\&."
 
@@ -2088,6 +2107,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 210\\&."
 msgstr "Hinzugefügt in Version 210\\&."
 
@@ -2133,6 +2153,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 218\\&."
 msgstr "Hinzugefügt in Version 218\\&."
 
@@ -2838,6 +2859,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 235\\&."
 msgstr "Hinzugefügt in Version 235\\&."
 
@@ -2953,7 +2975,8 @@ msgid "I<IgnoreSIGPIPE=>"
 msgstr "I<IgnoreSIGPIPE=>"
 
 #. type: Plain text
-#: archlinux debian-unstable mageia-cauldron
+#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If true, B<SIGPIPE> is ignored in the executed "
 "process\\&. Defaults to true since B<SIGPIPE> is generally only useful in "
@@ -3117,6 +3140,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 243\\&."
 msgstr "Hinzugefügt in Version 243\\&."
 
@@ -3263,14 +3287,28 @@ msgstr ""
 "zusammen mit I<PrivateUsers=>B<true> funktionieren\\&."
 
 #. type: Plain text
+#: archlinux mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Note that the various options that turn directories read-only (such as "
+"I<ProtectSystem=>, I<ReadOnlyPaths=>, \\&...) do not affect the ability for "
+"programs to connect to and communicate with B<AF_UNIX> sockets in these "
+"directores\\&. These options cannot be used to lock down access to IPC "
+"services hence\\&."
+msgstr ""
+"Beachten Sie, dass verschiedene Optionen, die Verzeichnisse nur lesbar "
+"machen (wie I<ProtectSystem=>, I<ReadOnlyPaths=>, …) keine Auswirkung auf "
+"die Fähigkeit von Programmen haben, sich mit B<AF_UNIX>-Sockets in diesen "
+"Verzeichnissen zu verbinden\\&. Daher können diese Optionen nicht zum "
+"Begrenzen von Zugriff auf IPC-Dienste verwandt werden\\&."
+
+#. type: Plain text
 #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
 #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
 msgid "I<ProtectSystem=>"
 msgstr "I<ProtectSystem=>"
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument or the special values \"full\" or \"strict\"\\&. If "
 "true, mounts the /usr/ and the boot loader directories (/boot and /efi) read-"
@@ -3285,9 +3323,12 @@ msgid ""
 "running services, unless they are involved with system updates or need to "
 "modify the operating system in other ways\\&. If this option is used, "
 "I<ReadWritePaths=> may be used to exclude specific directories from being "
-"made read-only\\&. This setting is implied if I<DynamicUser=> is set\\&. "
-"This setting cannot ensure protection in all cases\\&. In general it has the "
-"same limitations as I<ReadOnlyPaths=>, see below\\&. Defaults to off\\&."
+"made read-only\\&. Similar, I<StateDirectory=>, I<LogsDirectory=>, \\&... "
+"and related directory settings (see below) also exclude the specific "
+"directories from the effect of I<ProtectSystem=>\\&. This setting is implied "
+"if I<DynamicUser=> is set\\&. This setting cannot ensure protection in all "
+"cases\\&. In general it has the same limitations as I<ReadOnlyPaths=>, see "
+"below\\&. Defaults to off\\&."
 msgstr ""
 "Akzeptiert ein logisches Argument oder die besonderen Werte »full« oder "
 "»strict«\\&. Falls wahr, werden die Verzeichnisse /usr/ und die des "
@@ -3305,13 +3346,17 @@ msgstr ""
 "Systemaktualisierungen beteiligt oder müssen das Betriebssystem auf eine "
 "andere Art verändern\\&. Falls diese Option verwandt wird, kann "
 "I<ReadWritePaths=> verwandt werden, um bestimmte Verzeichnisse von dem nur "
-"lesbaren Verhalten auszunehmen\\&. Diese Einstellung ist impliziert, falls "
-"I<DynamicUser=> gesetzt ist\\&. Diese Einstellung kann nicht für alle Fälle "
-"den Schutz sicherstellen\\&. Im Allgemeinen hat es die gleichen Begrenzungen "
-"wie I<ReadOnlyPaths=>, siehe unten\\&. Standardmäßig aus\\&."
+"lesbaren Verhalten auszunehmen\\&. Ähnlich schließen I<StateDirectory=>, "
+"I<LogsDirectory=> und zugehörige Verzeichniseinstellungen (siehe unten) die "
+"konkreten Verzeichnisse von der Wirkung von I<ProtectSystem=> aus\\&. Diese "
+"Einstellung ist impliziert, falls I<DynamicUser=> gesetzt ist\\&. Diese "
+"Einstellung kann nicht für alle Fälle den Schutz sicherstellen\\&. Im "
+"Allgemeinen hat es die gleichen Begrenzungen wie I<ReadOnlyPaths=>, siehe "
+"unten\\&. Standardmäßig aus\\&."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 214\\&."
 msgstr "Hinzugefügt in Version 214\\&."
 
@@ -3722,8 +3767,8 @@ msgid ""
 "parameter\\&."
 msgstr ""
 "I<RuntimeDirectory=>, I<StateDirectory=>, I<CacheDirectory=> und "
-"I<LogsDirectory=> unterstützen optional einen zweiten Parameter, der durch "
-"»:« abgetrennt wird\\&. Der zweite Parameter wird als Zielpfad "
+"I<LogsDirectory=> unterstützen optional einen zweiten Parameter, der "
+"durch »:« abgetrennt wird\\&. Der zweite Parameter wird als Zielpfad "
 "interpretiert, der als Symlink auf das Verzeichnis erstellt wird\\&. Die "
 "Symlinks werden erstellt, nachdem alle Optionen I<BindPaths=> oder "
 "I<TemporaryFileSystem=> eingerichtet wurden, um flüchtige Symlinks zu "
@@ -3842,6 +3887,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 211\\&."
 msgstr "Hinzugefügt in Version 211\\&."
 
@@ -3873,6 +3919,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 234\\&."
 msgstr "Hinzugefügt in Version 234\\&."
 
@@ -3937,6 +3984,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 244\\&."
 msgstr "Hinzugefügt in Version 244\\&."
 
@@ -3972,7 +4020,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
 "Paths listed in I<ReadWritePaths=> are accessible from within the namespace "
 "with the same access modes as from outside of it\\&. Paths listed in "
@@ -4130,7 +4178,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
 "Please be extra careful when applying these options to API file systems (a "
 "list of them could be found in I<MountAPIVPS=>), since they may be required "
@@ -4170,6 +4218,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 231\\&."
 msgstr "Hinzugefügt in Version 231\\&."
 
@@ -4245,6 +4294,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 238\\&."
 msgstr "Hinzugefügt in Version 238\\&."
 
@@ -4335,6 +4385,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Enabling this option will install a system call filter to block low-level I/"
 "O system calls that are grouped in the I<@raw-io> set, remove B<CAP_MKNOD> "
@@ -4508,6 +4559,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 242\\&."
 msgstr "Hinzugefügt in Version 242\\&."
 
@@ -4638,6 +4690,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Note that this functionality might not be available, for example if KSM is "
 "disabled in the kernel, or the kernel doesn\\*(Aqt support controlling KSM "
@@ -4802,6 +4855,7 @@ msgstr "I<ProtectClock=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If set, writes to the hardware clock or system "
 "clock will be denied\\&. Defaults to off\\&. Enabling this option removes "
@@ -4838,6 +4892,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 245\\&."
 msgstr "Hinzugefügt in Version 245\\&."
 
@@ -4849,6 +4904,7 @@ msgstr "I<ProtectKernelTunables=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If true, kernel variables accessible through /"
 "proc/sys/, /sys/, /proc/sysrq-trigger, /proc/latency_stats, /proc/acpi, /"
@@ -4888,6 +4944,7 @@ msgstr "I<ProtectKernelModules=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If true, explicit module loading will be "
 "denied\\&. This allows module load and unload operations to be turned off on "
@@ -4930,6 +4987,7 @@ msgstr "I<ProtectKernelLogs=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If true, access to the kernel log ring buffer "
 "will be denied\\&. It is recommended to turn this on for most services that "
@@ -4989,6 +5047,7 @@ msgstr "I<RestrictAddressFamilies=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Restricts the set of socket address families accessible to the processes of "
 "this unit\\&. Takes \"none\", or a space-separated list of address family "
@@ -5357,6 +5416,7 @@ msgstr "I<RestrictNamespaces=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Restricts access to Linux namespace functionality for the processes of this "
 "unit\\&. For details about Linux namespaces, see B<namespaces>(7)\\&. Either "
@@ -5458,6 +5518,7 @@ msgstr "I<LockPersonality=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If set, locks down the B<personality>(2)  "
 "system call so that the kernel execution domain may not be changed from the "
@@ -5481,6 +5542,7 @@ msgstr "I<MemoryDenyWriteExecute=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If set, attempts to create memory mappings that "
 "are writable and executable at the same time, or to change existing memory "
@@ -5545,6 +5607,7 @@ msgstr "I<RestrictRealtime=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If set, any attempts to enable realtime "
 "scheduling in a process of the unit are refused\\&. This restricts access to "
@@ -5576,6 +5639,7 @@ msgstr "I<RestrictSUIDSGID=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a boolean argument\\&. If set, any attempts to set the set-user-ID "
 "(SUID) or set-group-ID (SGID) bits on files or directories will be denied "
@@ -5708,8 +5772,8 @@ msgstr ""
 "\\&."
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
 msgid ""
 "Other file system namespace unit settings \\(em I<PrivateMounts=>, "
 "I<PrivateTmp=>, I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, "
@@ -5727,6 +5791,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 239\\&."
 msgstr "Hinzugefügt in Version 239\\&."
 
@@ -5836,6 +5901,7 @@ msgstr "I<SystemCallFilter=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a space-separated list of system call names\\&. If this setting is "
 "used, all system calls executed by the unit processes except for the listed "
@@ -6519,6 +6585,7 @@ msgstr "I<SystemCallArchitectures=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a space-separated list of architecture identifiers to include in the "
 "system call filter\\&. The known architecture identifiers are the same as "
@@ -6601,6 +6668,7 @@ msgstr "I<SystemCallLog=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Takes a space-separated list of system call names\\&. If this setting is "
 "used, all system calls executed by the unit processes for the listed ones "
@@ -6756,6 +6824,7 @@ msgstr "I<EnvironmentFile=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Similar to I<Environment=>, but reads the environment variables from a text "
 "file\\&. The text file should contain newline-separated variable "
@@ -6782,6 +6851,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "In the file, an unquoted value after the \"=\" is parsed with the same "
 "backslash-escape rules as \\m[blue]B<POSIX shell unquoted "
@@ -6810,6 +6880,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "In the file, a \"\\*(Aq\"-quoted value after the \"=\" can span multiple "
 "lines and contain any character verbatim other than single quote, like "
@@ -6827,6 +6898,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "In the file, a \"\"\"-quoted value after the \"=\" can span multiple lines, "
 "and the same escape sequences are recognized as in \\m[blue]B<POSIX shell "
@@ -6972,6 +7044,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 228\\&."
 msgstr "Hinzugefügt in Version 228\\&."
 
@@ -7160,7 +7233,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
 "The B<socket> option is valid in socket-activated services only, and "
 "requires the relevant socket unit file (see B<systemd.socket>(5)  for "
@@ -7198,9 +7271,9 @@ msgid ""
 msgstr ""
 "Die Option B<fd:>I<Name> verbindet die Standardeingabe mit einem durch die "
 "Socket-Unit bereitgestellten bestimmten, benannten Dateideskriptor\\&. Der "
-"Name kann als Teil dieser Option angegeben werden, gefolgt vom Zeichen "
-"»:« (z\\&.B\\&. »fd:foobar«)\\&. Falls kein Name angegeben ist, wird der "
-"Name »stdin« impliziert (d\\&.h\\&. »fd« ist äquivalent zu »fd:stdin«)\\&. "
+"Name kann als Teil dieser Option angegeben werden, gefolgt vom Zeichen »:« "
+"(z\\&.B\\&. »fd:foobar«)\\&. Falls kein Name angegeben ist, wird der Name "
+"»stdin« impliziert (d\\&.h\\&. »fd« ist äquivalent zu »fd:stdin«)\\&. "
 "Mindestens eine Socket-Unit, die den angegebenen Namen definiert, muss über "
 "die Option I<Sockets=> bereitgestellt werden und der Dateideskriptorname "
 "darf sich vom Namen der Socket-Unit, die ihn enthält, unterscheiden\\&. "
@@ -7321,8 +7394,8 @@ msgstr ""
 "Systemkonsole\\&."
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
 msgid ""
 "The B<file:>I<path> option may be used to connect a specific file system "
 "object to standard output\\&. The semantics are similar to the same option "
@@ -7430,8 +7503,8 @@ msgstr ""
 "weitere Details über benannte Dateideskriptoren und ihrer Sortierung\\&."
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
 msgid ""
 "If the standard output (or error output, see below) of a unit is connected "
 "to the journal or the kernel log buffer, the unit will implicitly gain a "
@@ -7646,6 +7719,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 236\\&."
 msgstr "Hinzugefügt in Version 236\\&."
 
@@ -7747,6 +7821,15 @@ msgstr ""
 "zugewiesen, wird die Liste zurückgesetzt\\&."
 
 #. type: Plain text
+#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Note that this functionality is currently only available in system services, "
+"not in per-user services\\&."
+msgstr ""
+"Beachten Sie, dass diese Funktionalität derzeit nur für Systemdienste "
+"verfügbar ist, nicht für benutzerbezogene Dienste\\&."
+
+#. type: Plain text
 #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
 #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
 msgid "I<LogRateLimitIntervalSec=>, I<LogRateLimitBurst=>"
@@ -7754,6 +7837,7 @@ msgstr "I<LogRateLimitIntervalSec=>, I<LogRateLimitBurst=>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Configures the rate limiting that is applied to log messages generated by "
 "this unit\\&. If, in the time interval defined by "
@@ -7792,6 +7876,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 240\\&."
 msgstr "Hinzugefügt in Version 240\\&."
 
@@ -7839,8 +7924,8 @@ msgstr ""
 "das auf »~foobar« passt, zu der Erlaubt-Liste hinzufügt\\&."
 
 #. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
 msgid ""
 "Log messages are tested against denied patterns (if any), then against "
 "allowed patterns (if any)\\&. If a log message matches any of the denied "
@@ -7878,6 +7963,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 253\\&."
 msgstr "Hinzugefügt in Version 253\\&."
 
@@ -8295,9 +8381,9 @@ msgstr ""
 msgid ""
 "If an absolute path referring to a directory is specified, every file in "
 "that directory (recursively) will be loaded as a separate credential\\&. The "
-"ID for each credential will be the provided ID suffixed with "
-"\"_$FILENAME\" (e\\&.g\\&., \"Key_file1\")\\&. When loading from a "
-"directory, symlinks will be ignored\\&."
+"ID for each credential will be the provided ID suffixed with \"_$FILENAME\" "
+"(e\\&.g\\&., \"Key_file1\")\\&. When loading from a directory, symlinks will "
+"be ignored\\&."
 msgstr ""
 "Falls ein absoluter Pfad festgelegt wird, der sich auf ein Verzeichnis "
 "bezieht, dann wird jede Datei in diesem Verzeichnis (rekursiv) als eine "
@@ -8393,7 +8479,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
 msgid ""
 "In order to reference the path a credential may be read from within a "
 "I<ExecStart=> command line use \"${CREDENTIALS_DIRECTORY}/mycred\", e\\&."
@@ -8748,6 +8834,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 225\\&."
 msgstr "Hinzugefügt in Version 225\\&."
 
@@ -8929,6 +9016,7 @@ msgstr "I<$PATH>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "Colon-separated list of directories to use when launching executables\\&.  "
 "B<systemd> uses a fixed value of \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/"
@@ -8947,6 +9035,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 208\\&."
 msgstr "Hinzugefügt in Version 208\\&."
 
@@ -8974,6 +9063,7 @@ msgstr "I<$USER>, I<$LOGNAME>, I<$HOME>, I<$SHELL>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "User name (twice), home directory, and the login shell\\&.  I<$USER> is set "
 "unconditionally, while I<$HOME>, I<$LOGNAME>, and I<$SHELL> are only set for "
@@ -9434,6 +9524,7 @@ msgstr "exec-condition"
 
 #. type: tbl table
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 #, no-wrap
 msgid "Service did not run because I<ExecCondition=> failed\\&."
 msgstr "Der Dienst wurde nicht ausgeführt, da I<ExecCondition=> fehlschlug\\&."
@@ -9447,6 +9538,7 @@ msgstr "oom-kill"
 
 #. type: tbl table
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 #, no-wrap
 msgid "A service process was terminated by the Out-Of-Memory (OOM) killer\\&."
 msgstr "Ein Diensteprozess wurde durch den Speicherknappheit- (OOM-)Killer beendet\\&."
@@ -9834,6 +9926,7 @@ msgstr ""
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "Added in version 252\\&."
 msgstr "Hinzugefügt in Version 252\\&."
 
@@ -9866,6 +9959,7 @@ msgstr "I<$FDSTORE>"
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid ""
 "The maximum number of file descriptors that may be stored in the manager for "
 "the service\\&. This variable is set when the file descriptor store is "
@@ -11751,6 +11845,7 @@ msgstr " 9."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "unicode noncharacters"
 msgstr "Unicode-Nichtzeichen"
 
@@ -11769,6 +11864,7 @@ msgstr "10."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "unicode byte order mark"
 msgstr "Unicode-Byte-Reihenfolge-Markierung"
 
@@ -11787,6 +11883,7 @@ msgstr "11."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "POSIX shell unquoted text"
 msgstr "POSIX-Shell-Text ohne Anführungszeichen"
 
@@ -11809,6 +11906,7 @@ msgstr "12."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "POSIX shell single-quoted text"
 msgstr "POSIX-Shell-Text in einfachen Anführungszeichen"
 
@@ -11831,6 +11929,7 @@ msgstr "13."
 
 #. type: Plain text
 #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
 msgid "POSIX shell double-quoted text"
 msgstr "POSIX-Shell-Text in doppelten englischen Anführungszeichen"
 
@@ -11982,14 +12081,14 @@ msgstr ""
 "generic/iniscrptact.html"
 
 #. type: TH
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 #, no-wrap
 msgid "systemd 254"
 msgstr "systemd 254"
 
 # FIXME btrfs → B<btrfs>(8)
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "To make sure making ephemeral copies can be made efficiently, the root "
 "directory or root image should be located on the same filesystem as /var/lib/"
@@ -12010,7 +12109,7 @@ msgstr ""
 "effiziente flüchtige Kopie sicherzustellen\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
 msgid ""
 "In order to allow propagating mounts at runtime in a safe manner, /run/"
 "systemd/propagate on the host will be used to set up new mounts, and /run/"
@@ -12024,7 +12123,7 @@ msgstr ""
 "werden\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "A read-only OverlayFS will be set up on top of /usr/ and /opt/ "
 "hierarchies\\&. The order in which the images are listed will determine the "
@@ -12038,7 +12137,7 @@ msgstr ""
 "entsprechend darüber bis ganz oben\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Each image must carry a /usr/lib/extension-release\\&.d/extension-release\\&."
 "IMAGE file, with the appropriate metadata which matches I<RootImage=>/"
@@ -12056,7 +12155,7 @@ msgstr ""
 "check> angehängt werden\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "A read-only OverlayFS will be set up on top of /usr/ and /opt/ "
 "hierarchies\\&. The order in which the directories are listed will determine "
@@ -12070,7 +12169,7 @@ msgstr ""
 "spätere sind entsprechend darüber bis ganz oben\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Each directory must contain a /usr/lib/extension-release\\&.d/extension-"
 "release\\&.IMAGE file, with the appropriate metadata which matches "
@@ -12082,7 +12181,7 @@ msgstr ""
 "release>(5)\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If true, ensures that the service process and "
 "all its children can never gain new privileges through B<execve()> (e\\&."
@@ -12124,8 +12223,7 @@ msgstr ""
 "Privilegien«>\\m[]\\&\\s-2\\u[4]\\d\\s+2\\&."
 
 #. type: Plain text
-#: debian-bookworm fedora-40 fedora-rawhide opensuse-leap-15-6
-#: opensuse-tumbleweed
+#: debian-bookworm
 msgid ""
 "Takes a boolean argument\\&. If true, causes B<SIGPIPE> to be ignored in the "
 "executed process\\&. Defaults to true because B<SIGPIPE> generally is useful "
@@ -12136,7 +12234,48 @@ msgstr ""
 "Allgemeinen nur in Shell-Pipes nützlich ist\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm fedora-40 opensuse-leap-15-6
+msgid ""
+"Takes a boolean argument or the special values \"full\" or \"strict\"\\&. If "
+"true, mounts the /usr/ and the boot loader directories (/boot and /efi) read-"
+"only for processes invoked by this unit\\&. If set to \"full\", the /etc/ "
+"directory is mounted read-only, too\\&. If set to \"strict\" the entire file "
+"system hierarchy is mounted read-only, except for the API file system "
+"subtrees /dev/, /proc/ and /sys/ (protect these directories using "
+"I<PrivateDevices=>, I<ProtectKernelTunables=>, I<ProtectControlGroups=>)\\&. "
+"This setting ensures that any modification of the vendor-supplied operating "
+"system (and optionally its configuration, and local mounts) is prohibited "
+"for the service\\&. It is recommended to enable this setting for all long-"
+"running services, unless they are involved with system updates or need to "
+"modify the operating system in other ways\\&. If this option is used, "
+"I<ReadWritePaths=> may be used to exclude specific directories from being "
+"made read-only\\&. This setting is implied if I<DynamicUser=> is set\\&. "
+"This setting cannot ensure protection in all cases\\&. In general it has the "
+"same limitations as I<ReadOnlyPaths=>, see below\\&. Defaults to off\\&."
+msgstr ""
+"Akzeptiert ein logisches Argument oder die besonderen Werte »full« oder "
+"»strict«\\&. Falls wahr, werden die Verzeichnisse /usr/ und die des "
+"Systemstartprogramms (/boot and /efi) für von dieser Unit aufgerufene "
+"Prozesse nur lesbar eingehängt\\&. Falls auf »full« gesetzt, wird auch das "
+"Verzeichnis /etc/ nur lesbar eingehängt\\&. Falls auf »strict« gesetzt, wird "
+"die gesamte Dateisystemhierarchie nur lesbar eingehängt, außer der API-"
+"Dateisystemunterbäume /dev/, /proc/ und /sys/ (schützen Sie diese "
+"Verzeichnisse mittels I<PrivateDevices=>, I<ProtectKernelTunables=>, "
+"I<ProtectControlGroups=>)\\&. Diese Einstellung stellt sicher, dass alle "
+"Änderungen an dem vom Lieferanten bereitgestellten Betriebssystem (und "
+"optional seiner Konfiguration und lokaler Einhängungen) für den Dienst "
+"verboten sind\\&. Es wird empfohlen, diese Einstellung für alle "
+"langlaufenden Dienste zu aktivieren, außer sie sind an "
+"Systemaktualisierungen beteiligt oder müssen das Betriebssystem auf eine "
+"andere Art verändern\\&. Falls diese Option verwandt wird, kann "
+"I<ReadWritePaths=> verwandt werden, um bestimmte Verzeichnisse von dem nur "
+"lesbaren Verhalten auszunehmen\\&. Diese Einstellung ist impliziert, falls "
+"I<DynamicUser=> gesetzt ist\\&. Diese Einstellung kann nicht für alle Fälle "
+"den Schutz sicherstellen\\&. Im Allgemeinen hat es die gleichen Begrenzungen "
+"wie I<ReadOnlyPaths=>, siehe unten\\&. Standardmäßig aus\\&."
+
+#. type: Plain text
+#: debian-bookworm
 msgid ""
 "Paths listed in I<ReadWritePaths=> are accessible from within the namespace "
 "with the same access modes as from outside of it\\&. Paths listed in "
@@ -12176,7 +12315,7 @@ msgstr ""
 "ExecPaths=/usr/sbin/mein_Daemon /lib /lib64\n"
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Enabling this option will install a system call filter to block low-level I/"
 "O system calls that are grouped in the I<@raw-io> set, remove B<CAP_MKNOD> "
@@ -12216,7 +12355,7 @@ msgstr ""
 
 # FIXME B<prctl()> → B<prctl>(2)
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Note that this functionality might not be available, for example if KSM is "
 "disabled in the kernel, or the kernel doesn\\*(Aqt support controlling KSM "
@@ -12228,7 +12367,7 @@ msgstr ""
 "unterstützt\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "If this setting is on, but the unit doesn\\*(Aqt have the B<CAP_SYS_ADMIN> "
 "capability (e\\&.g\\&. services for which I<User=> is set), "
@@ -12239,7 +12378,7 @@ msgstr ""
 "I<User=> gesetzt ist), wird I<NoNewPrivileges=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If set, writes to the hardware clock or system "
 "clock will be denied\\&. Defaults to off\\&. Enabling this option removes "
@@ -12270,7 +12409,7 @@ msgstr ""
 "ist), wird I<NoNewPrivileges=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If true, kernel variables accessible through /"
 "proc/sys/, /sys/, /proc/sysrq-trigger, /proc/latency_stats, /proc/acpi, /"
@@ -12309,7 +12448,7 @@ msgstr ""
 "I<ProtectKernelTunables=> gesetzt ist, wird I<MountAPIVFS=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If true, explicit module loading will be "
 "denied\\&. This allows module load and unload operations to be turned off on "
@@ -12351,7 +12490,7 @@ msgstr ""
 "impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If true, access to the kernel log ring buffer "
 "will be denied\\&. It is recommended to turn this on for most services that "
@@ -12380,7 +12519,7 @@ msgstr ""
 "I<NoNewPrivileges=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Restricts the set of socket address families accessible to the processes of "
 "this unit\\&. Takes \"none\", or a space-separated list of address family "
@@ -12435,7 +12574,7 @@ msgstr ""
 "vorangestellt sind\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Restricts access to Linux namespace functionality for the processes of this "
 "unit\\&. For details about Linux namespaces, see B<namespaces>(7)\\&. Either "
@@ -12497,7 +12636,7 @@ msgstr ""
 "I<NoNewPrivileges=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If set, locks down the B<personality>(2)  "
 "system call so that the kernel execution domain may not be changed from the "
@@ -12518,7 +12657,7 @@ msgstr ""
 "Setzen von I<User=>) erfolgt, wird I<NoNewPrivileges=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If set, attempts to create memory mappings that "
 "are writable and executable at the same time, or to change existing memory "
@@ -12580,7 +12719,7 @@ msgstr ""
 "erfolgt, wird I<NoNewPrivileges=yes> impliziert\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If set, any attempts to enable realtime "
 "scheduling in a process of the unit are refused\\&. This restricts access to "
@@ -12610,7 +12749,7 @@ msgstr ""
 "aus\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a boolean argument\\&. If set, any attempts to set the set-user-ID "
 "(SUID) or set-group-ID (SGID) bits on files or directories will be denied "
@@ -12641,7 +12780,7 @@ msgstr ""
 "I<DynamicUser=> aktiviert ist\\&. Standardmäßig »off«\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a space-separated list of system call names\\&. If this setting is "
 "used, all system calls executed by the unit processes except for the listed "
@@ -12700,7 +12839,7 @@ msgstr ""
 "nicht\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a space-separated list of architecture identifiers to include in the "
 "system call filter\\&. The known architecture identifiers are the same as "
@@ -12727,7 +12866,7 @@ msgstr ""
 "keine Filterung erfolgt\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Takes a space-separated list of system call names\\&. If this setting is "
 "used, all system calls executed by the unit processes for the listed ones "
@@ -12759,7 +12898,7 @@ msgstr ""
 "Diese betrifft Befehle, denen »+« vorangestellt ist, nicht\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Similar to I<Environment=>, but reads the environment variables from a text "
 "file\\&. The text file should contain newline-separated variable "
@@ -12783,7 +12922,7 @@ msgstr ""
 "Steuerzeichen außer NUL sind erlaubt\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "In the file, an unquoted value after the \"=\" is parsed with the same "
 "backslash-escape rules as \\m[blue]B<unquoted "
@@ -12811,7 +12950,7 @@ msgstr ""
 "»\\e\\e« der Wert »\\e« wird\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "In the file, a \"\\*(Aq\"-quoted value after the \"=\" can span multiple "
 "lines and contain any character verbatim other than single quote, like "
@@ -12828,7 +12967,7 @@ msgstr ""
 "werden verworfen\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "In the file, a \"\"\"-quoted value after the \"=\" can span multiple lines, "
 "and the same escape sequences are recognized as in \\m[blue]B<double-quoted "
@@ -12852,7 +12991,7 @@ msgstr ""
 "doppelten Anführungszeichen werden verworfen\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
 msgid ""
 "The B<socket> option is valid in socket-activated services only, and "
 "requires the relevant socket unit file (see B<systemd.socket>(5)  for "
@@ -12873,7 +13012,7 @@ msgstr ""
 
 # FIXME B<systemd-journald.service>(8)  This → B<systemd-journald.service>(8)\\&. This
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Configures the rate limiting that is applied to log messages generated by "
 "this unit\\&. If, in the time interval defined by "
@@ -12911,7 +13050,7 @@ msgstr ""
 "B<syslog>(3) oder ähnlichen Funktionen erstellten Meldungen durchgesetzt)\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
 msgid ""
 "In order to reference the path a credential may be read from within a "
 "I<ExecStart=> command line use \"${CREDENTIALS_DIRECTORY}/mycred\", e\\&."
@@ -12928,7 +13067,7 @@ msgstr ""
 "»Environment=MYCREDPATH=%d/mycred«\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "Colon-separated list of directories to use when launching executables\\&.  "
 "B<systemd> uses a fixed value of \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/"
@@ -12949,7 +13088,7 @@ msgstr ""
 "vorgegebenen Namen in I<$PATH> zu haben\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "User name (twice), home directory, and the login shell\\&. The variables are "
 "set for the units that have I<User=> set, which includes user B<systemd> "
@@ -12961,7 +13100,7 @@ msgstr ""
 
 # FIXME B<sd_pid_notify_with_fds()> → B<sd_pid_notify_with_fds>(3)
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid ""
 "If the file descriptor store is enabled for a service (i\\&.e\\&.  "
 "I<FileDescriptorStoreMax=> is set to a non-zero value, see B<systemd."
@@ -12980,26 +13119,246 @@ msgstr ""
 "Diensteverwalter senden (siehe B<sd_notify>(3) zu Details)\\&."
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid "noncharacters"
 msgstr "Nichtzeichen"
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid "byte order mark"
 msgstr "Byte-Reihenfolge-Markierung"
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid "unquoted text"
 msgstr "Text ohne Anführungszeichen"
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid "single-quoted text"
 msgstr "Text in einfachen Anführungszeichen"
 
 #. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
 msgid "double-quoted text"
 msgstr "Text in doppelten englischen Anführungszeichen"
+
+#. type: TH
+#: debian-unstable fedora-rawhide
+#, no-wrap
+msgid "systemd 256~rc3"
+msgstr "systemd 256~rc3"
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Takes a directory path relative to the host\\*(Aqs root directory (i\\&."
+"e\\&. the root of the system running the service manager)\\&. Sets the root "
+"directory for executed processes, with the B<pivot_root>(2)  or "
+"B<chroot>(2)  system call\\&. If this is used, it must be ensured that the "
+"process binary and all its auxiliary files are available in the new root\\&. "
+"Note that setting this parameter might result in additional dependencies to "
+"be added to the unit (see above)\\&."
+msgstr ""
+"Akzeptiert einen Verzeichnispfad, der relativ zum Wurzelverzeichnis des "
+"Rechners (d\\&.h\\&. der Wurzel des Systems, auf dem der Diensteverwalter "
+"läuft) ist\\&. Setzt mit dem Systemaufruf B<pivot_root>(2) oder B<chroot>(2) "
+"das Wurzelverzeichnis für ausgeführte Prozesse. Falls dies verwandt wird, "
+"muss sichergestellt werden, dass das Prozessprogramm und alle seine "
+"zugehörigen Dateien in der neuen Wurzel verfügbar sind\\&. Beachten Sie, "
+"dass das Setzen dieses Parameters die Hinzunahme von zusätzlichen "
+"Abhängigkeiten (siehe oben) auslösen kann\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"In place of the directory path a \"\\&.v/\" versioned directory may be "
+"specified, see B<systemd.v>(7)  for details\\&."
+msgstr ""
+"Anstelle des Verzeichnispfades kann ein versioniertes Verzeichnis »\\&.v/« "
+"angegeben werden, siehe B<systemd.v>(7) zu Details\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"In place of the image path a \"\\&.v/\" versioned directory may be "
+"specified, see B<systemd.v>(7)  for details\\&."
+msgstr ""
+"Anstelle des Abbildpfades kann ein versioniertes Verzeichnis »\\&.v/« "
+"angegeben werden, siehe B<systemd.v>(7) zu Details\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Using this option implies that a mount namespace is allocated for the unit, "
+"i\\&.e\\&. it implies the effect of I<PrivateMounts=> (see below)\\&."
+msgstr ""
+"Die Verwendung dieser Option impliziert, dass der Einhängenamensraum der "
+"Unit zugewiesen ist, d\\&.h\\&. sie impliziert die Wirkung von "
+"I<PrivateMounts=> (siehe unten)\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Takes a boolean parameter that controls whether to set the I<$HOME>, "
+"I<$LOGNAME>, and I<$SHELL> environment variables\\&. If not set, this "
+"defaults to true if I<User=>, I<DynamicUser=> or I<PAMName=> are set, false "
+"otherwise\\&. If set to true, the variables will always be set for system "
+"services, i\\&.e\\&. even when the default user \"root\" is used\\&. If set "
+"to false, the mentioned variables are not set by the service manager, no "
+"matter whether I<User=>, I<DynamicUser=>, or I<PAMName=> are used or not\\&. "
+"This option normally has no effect on services of the per-user service "
+"manager, since in that case these variables are typically inherited from "
+"user manager\\*(Aqs own environment anyway\\&."
+msgstr ""
+"Dieser logische Parameter steuert, ob die Umgebungsvariablen I<$HOME>, "
+"I<$LOGNAME> und I<$SHELL> gesetzt werden\\&. Falls nicht gesetzt, ist die "
+"Vorgabe wahr und falls I<User=>, I<DynamicUser=> oder I<PAMName=> gesetzt "
+"sind, andernfalls falsch\\&. Falls auf wahr gesetzt, werden die Variablen "
+"für Systemdienste immer gesetzt, d\\&.h\\&. selbst wenn der Standardbenutzer "
+"»root« verwandt wird\\&. Falls auf falsch gesetzt, werden die aufgeführten "
+"Variablen durch den Systemverwalter nicht gesetzt, unabhängig davon, ob "
+"I<User=>, I<DynamicUser=> oder I<PAMName=> verwandt wird oder nicht\\&. "
+"Diese Option hat bei Diensten des benutzerbezogenen Diensteverwalters "
+"normalerweise keine Auswirkung, da in diesem Fall diese Variablen sowieso "
+"typischerweise von der eigenen Umgebung des Benutzerverwalters geerbt "
+"werden\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Note that the various options that turn directories read-only (such as "
+"I<ProtectSystem=>, I<ReadOnlyPaths=>, \\&...) do not affect the ability for "
+"programs to connect to and communicate with B<AF_UNIX> sockets in these "
+"directories\\&. These options cannot be used to lock down access to IPC "
+"services hence\\&."
+msgstr ""
+"Beachten Sie, dass verschiedene Optionen, die Verzeichnisse nur lesbar "
+"machen (wie I<ProtectSystem=>, I<ReadOnlyPaths=>, …) keine Auswirkung auf "
+"die Fähigkeit von Programmen haben, sich mit B<AF_UNIX>-Sockets in diesen "
+"Verzeichnissen zu verbinden\\&. Daher können diese Optionen nicht zum "
+"Begrenzen von Zugriff auf IPC-Dienste verwandt werden\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Other file system namespace unit settings \\(em I<PrivateTmp=>, "
+"I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, I<ReadOnlyPaths=>, "
+"I<InaccessiblePaths=>, I<ReadWritePaths=>, I<BindPaths=>, "
+"I<BindReadOnlyPaths=>, \\&... \\(em also enable file system namespacing in a "
+"fashion equivalent to this option\\&. Hence it is primarily useful to "
+"explicitly request this behaviour if none of the other settings are used\\&."
+msgstr ""
+"Andere Dateisystemnamensräume-Einstellungen für Units \\(em I<PrivateTmp=>, "
+"I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, I<ReadOnlyPaths=>, "
+"I<InaccessiblePaths=>, I<ReadWritePaths=>, I<BindPaths=>, "
+"I<BindReadOnlyPaths=>, … \\(em ermöglichen Dateisystemnamensräume in einer "
+"Art ähnlich dieser Option\\&. Daher ist es primär zur expliziten Anfrage "
+"dieses Verhalten nützlich, falls keine der anderen Einstellungen verwandt "
+"wird\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"The B<file:>I<path> option may be used to connect a specific file system "
+"object to standard output\\&. The semantics are similar to the same option "
+"of I<StandardInput=>, see above\\&. If I<path> refers to a regular file on "
+"the filesystem, it is opened (created if it doesn\\*(Aqt exist yet using "
+"privileges of the user executing the systemd process) for writing at the "
+"beginning of the file, but without truncating it\\&. If standard input and "
+"output are directed to the same file path, it is opened only once \\(em for "
+"reading as well as writing \\(em and duplicated\\&. This is particularly "
+"useful when the specified path refers to an B<AF_UNIX> socket in the file "
+"system, as in that case only a single stream connection is created for both "
+"input and output\\&."
+msgstr ""
+"Die Option B<file:>I<Pfad> kann zum Verbinden eines bestimmten "
+"Dateisystemobjektes mit der Standardausgabe verwandt werden\\&. Die Semantik "
+"ist ähnlich zu der der gleichen Option von I<StandardInput=>, siehe oben\\&. "
+"Falls sich I<Pfad> auf eine reguläre Datei auf dem Dateisystem bezieht, wird "
+"sie zum Schreiben am Anfang der Datei geöffnet (werden mit den Privilegien "
+"des Benutzers, der den Systemd-Prozess ausführt, erstellt, falls sie noch "
+"nicht existiert), aber ohne sie abzuschneiden\\&. Falls die Standardeingabe "
+"und -ausgabe auf den gleichen Dateipfad verwiesen werden, wird dieser nur "
+"einmal \\(en zum Lesen und Schreiben \\(en geöffnet und dupliziert\\&. Dies "
+"ist insbesondere nützlich, wenn sich der festgelegte Pfad auf ein B<AF_UNIX>-"
+"Socket im Dateisystem bezieht, da in diesem Fall nur eine einzelne "
+"Datenstromverbindung für sowohl Ein- als auch Ausgabe erstellt wird\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"If the standard output (or error output, see below) of a unit is connected "
+"to the journal or the kernel log buffer, the unit will implicitly gain a "
+"dependency of type I<After=> on systemd-journald\\&.socket (also see the "
+"\"Implicit Dependencies\" section above)\\&. Also note that in this case "
+"stdout (or stderr, see below) will be an B<AF_UNIX> stream socket, and not a "
+"pipe or FIFO that can be reopened\\&. This means when executing shell "
+"scripts the construct B<echo \"hello\" E<gt> /dev/stderr> for writing text "
+"to stderr will not work\\&. To mitigate this use the construct B<echo "
+"\"hello\" E<gt>&2> instead, which is mostly equivalent and avoids this "
+"pitfall\\&."
+msgstr ""
+"Falls die Standardausgabe (oder die Fehlerausgabe, siehe unten) einer Unit "
+"mit dem Journal oder dem Kernelprotokollpuffer verbunden ist, wird die Unit "
+"implizit eine Abhängigkeit vom Typ I<After=> von systemd-journald\\&.socket "
+"erhalten (siehe auch den Abschnitt »Implizite Abhängigkeiten« oben)\\&. "
+"Beachten Sie auch, dass in diesem Fall Stdout (oder Stderr, siehe unten) ein "
+"B<AF_UNIX>-Datenstrom-Socket und keine PIPE oder FIFO, die erneut geöffnet "
+"werden kann, sein wird\\&. Das bedeutet, dass bei der Ausführung von Shell-"
+"Skripten die Konstruktion »B<echo \"hello\" E<gt> /dev/stderr>« zum "
+"Schreiben von Text nach Stderr nicht funktionieren wird\\&. Um dies zu "
+"entschärfen, verwenden Sie stattdessen die Konstruktion »B<echo \"hello\" "
+"E<gt>&2>«, die größtenteils äquivalent ist und diesen Fallstrick "
+"vermeidet\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Log messages are tested against denied patterns (if any), then against "
+"allowed patterns (if any)\\&. If a log message matches any of the denied "
+"patterns, it is discarded immediately without considering allowed "
+"patterns\\&. Remaining log messages are tested against allowed patterns\\&. "
+"Messages matching against none of the allowed pattern are discarded\\&. If "
+"no allowed patterns are defined, then all messages are processed directly "
+"after going through denied filters\\&."
+msgstr ""
+"Protokollmeldungen werden gegen Verbotsmuster geprüft (falls vorhanden), "
+"dann gegen Erlaubt-Muster (falls vorhanden)\\&. Falls eine Protokollmeldung "
+"auf eines der Verbotsmuster passst, wird sie sofort ohne Berücksichtigung "
+"der Erlaubt-Mustern verworfen\\&. Die verbliebenen Protokollmeldungen werden "
+"gegen die Erlaubt-Muster geprüft\\&. Meldungen, die auf keines der Erlaubt-"
+"Muster passen, werden verworfen\\&. Falls keine Erlaubt-Muster definiert "
+"sind, dann werden alle Meldungen direkt verarbeitet, nachdem sie durch die "
+"Verbotsfilter gelaufen sind\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Note that if the path is not specified or a valid credential identifier is "
+"given, i\\&.e\\&. in the above two cases, a missing credential is not "
+"considered fatal\\&."
+msgstr ""
+"Beachten Sie, dass eine fehlende Zugangsberechtigung nicht als fatal "
+"betrachtet wird, falls der Pfad nicht angegeben ist oder ein gültiger "
+"Zugangsberechtigungs-Kennzeichner angegeben ist, d\\&.h\\&. in einem der "
+"obigen Fälle\\&."
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Note that encrypted credentials targeted for services of the per-user "
+"service manager must be encrypted with B<systemd-creds encrypt --user>, and "
+"those for the system service manager without the B<--user> switch\\&. "
+"Encrypted credentials are always targeted to a specific user or the system "
+"as a whole, and it is ensured that per-user service managers cannot decrypt "
+"secrets intended for the system or for other users\\&."
+msgstr ""
+"Beachten Sie, dass verschlüsselte Zugangsberechtigungen, die für den "
+"benutzerbezogenen Diensteverwalter gedacht sind, mit B<systemd-creds encrypt "
+"--user> verschlüsselt sein müssen, und solche für den System-"
+"Diensteverwalter ohne den Schalter B<--user>\\&. Verschlüsselte "
+"Zugangsberechtigungen sind immer für einen bestimmten Benutzer oder das "
+"System als Ganzes gedacht und es wird sichergestellt, dass benutzerbezogene "
+"Diensteverwalter keine Geheimnisse entschlüsseln können, die für das System "
+"oder andere Benutzer gedacht sind\\&."