summaryrefslogtreecommitdiffstats
path: root/templates/man5/systemd.exec.5.pot
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--templates/man5/systemd.exec.5.pot400
1 files changed, 323 insertions, 77 deletions
diff --git a/templates/man5/systemd.exec.5.pot b/templates/man5/systemd.exec.5.pot
index c568b2b2..0f3ee3a0 100644
--- a/templates/man5/systemd.exec.5.pot
+++ b/templates/man5/systemd.exec.5.pot
@@ -7,7 +7,7 @@
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2024-03-01 17:10+0100\n"
+"POT-Creation-Date: 2024-06-01 06:27+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
@@ -24,7 +24,7 @@ msgid "SYSTEMD\\&.EXEC"
msgstr ""
#. type: TH
-#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed
#, no-wrap
msgid "systemd 255"
msgstr ""
@@ -197,6 +197,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 250\\&."
msgstr ""
@@ -230,8 +231,8 @@ msgid "I<RootDirectory=>"
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid ""
"Takes a directory path relative to the host\\*(Aqs root directory (i\\&."
"e\\&. the root of the system running the service manager)\\&. Sets the root "
@@ -353,6 +354,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 233\\&."
msgstr ""
@@ -387,6 +389,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 247\\&."
msgstr ""
@@ -410,6 +413,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"To make sure making ephemeral copies can be made efficiently, the root "
"directory or root image should be located on the same filesystem as /var/lib/"
@@ -422,6 +426,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 254\\&."
msgstr ""
@@ -465,6 +470,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 246\\&."
msgstr ""
@@ -600,7 +606,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"In order to allow propagating mounts at runtime in a safe manner, /run/"
"systemd/propagate/ on the host will be used to set up new mounts, and /run/"
@@ -618,14 +624,14 @@ msgstr ""
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
-"Takes one of \"noaccess\", \"invisible\", \"ptraceable\" or "
-"\"default\" (which it defaults to)\\&. When set, this controls the "
-"\"hidepid=\" mount option of the \"procfs\" instance for the unit that "
-"controls which directories with process metainformation (/proc/I<PID>) are "
-"visible and accessible: when set to \"noaccess\" the ability to access most "
-"of other users\\*(Aq process metadata in /proc/ is taken away for processes "
-"of the service\\&. When set to \"invisible\" processes owned by other users "
-"are hidden from /proc/\\&. If \"ptraceable\" all processes that cannot be "
+"Takes one of \"noaccess\", \"invisible\", \"ptraceable\" or \"default\" "
+"(which it defaults to)\\&. When set, this controls the \"hidepid=\" mount "
+"option of the \"procfs\" instance for the unit that controls which "
+"directories with process metainformation (/proc/I<PID>) are visible and "
+"accessible: when set to \"noaccess\" the ability to access most of other "
+"users\\*(Aq process metadata in /proc/ is taken away for processes of the "
+"service\\&. When set to \"invisible\" processes owned by other users are "
+"hidden from /proc/\\&. If \"ptraceable\" all processes that cannot be "
"B<ptrace()>\\*(Aqed by a process are hidden to it\\&. If \"default\" no "
"restrictions on /proc/ access or visibility are made\\&. For further details "
"see \\m[blue]B<The /proc Filesystem>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&. It is "
@@ -826,6 +832,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"A read-only OverlayFS will be set up on top of /usr/ and /opt/ hierarchies "
"for sysext images and /etc/ hierarchy for confext images\\&. The order in "
@@ -858,6 +865,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Each sysext image must carry a /usr/lib/extension-release\\&.d/extension-"
"release\\&.IMAGE file while each confext image must carry a /etc/extension-"
@@ -870,6 +878,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 248\\&."
msgstr ""
@@ -891,6 +900,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"A read-only OverlayFS will be set up on top of /usr/ and /opt/ hierarchies "
"for sysext images and /etc/ hierarchy for confext images\\&. The order in "
@@ -920,6 +930,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Each sysext directory must contain a /usr/lib/extension-release\\&.d/"
"extension-release\\&.IMAGE file while each confext directory must carry a /"
@@ -938,6 +949,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 251\\&."
msgstr ""
@@ -1091,6 +1103,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 232\\&."
msgstr ""
@@ -1116,11 +1129,12 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "I<SetLoginEnvironment=>"
msgstr ""
#. type: Plain text
-#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed
msgid ""
"Takes a boolean parameter that controls whether to set I<$HOME>, "
"I<$LOGNAME>, and I<$SHELL> environment variables\\&. If unset, this is "
@@ -1134,6 +1148,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 255\\&."
msgstr ""
@@ -1315,6 +1330,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 229\\&."
msgstr ""
@@ -1333,6 +1349,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If true, ensures that the service process and "
"all its children can never gain new privileges through B<execve()> (e\\&."
@@ -1357,6 +1374,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 187\\&."
msgstr ""
@@ -1408,6 +1426,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 209\\&."
msgstr ""
@@ -1430,6 +1449,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 210\\&."
msgstr ""
@@ -1463,6 +1483,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 218\\&."
msgstr ""
@@ -2042,6 +2063,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 235\\&."
msgstr ""
@@ -2123,7 +2145,8 @@ msgid "I<IgnoreSIGPIPE=>"
msgstr ""
#. type: Plain text
-#: archlinux debian-unstable mageia-cauldron
+#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If true, B<SIGPIPE> is ignored in the executed "
"process\\&. Defaults to true since B<SIGPIPE> is generally only useful in "
@@ -2244,6 +2267,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 243\\&."
msgstr ""
@@ -2343,14 +2367,23 @@ msgid ""
msgstr ""
#. type: Plain text
+#: archlinux mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Note that the various options that turn directories read-only (such as "
+"I<ProtectSystem=>, I<ReadOnlyPaths=>, \\&...) do not affect the ability for "
+"programs to connect to and communicate with B<AF_UNIX> sockets in these "
+"directores\\&. These options cannot be used to lock down access to IPC "
+"services hence\\&."
+msgstr ""
+
+#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "I<ProtectSystem=>"
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed
msgid ""
"Takes a boolean argument or the special values \"full\" or \"strict\"\\&. If "
"true, mounts the /usr/ and the boot loader directories (/boot and /efi) read-"
@@ -2365,13 +2398,17 @@ msgid ""
"running services, unless they are involved with system updates or need to "
"modify the operating system in other ways\\&. If this option is used, "
"I<ReadWritePaths=> may be used to exclude specific directories from being "
-"made read-only\\&. This setting is implied if I<DynamicUser=> is set\\&. "
-"This setting cannot ensure protection in all cases\\&. In general it has the "
-"same limitations as I<ReadOnlyPaths=>, see below\\&. Defaults to off\\&."
+"made read-only\\&. Similar, I<StateDirectory=>, I<LogsDirectory=>, \\&... "
+"and related directory settings (see below) also exclude the specific "
+"directories from the effect of I<ProtectSystem=>\\&. This setting is implied "
+"if I<DynamicUser=> is set\\&. This setting cannot ensure protection in all "
+"cases\\&. In general it has the same limitations as I<ReadOnlyPaths=>, see "
+"below\\&. Defaults to off\\&."
msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 214\\&."
msgstr ""
@@ -2786,6 +2823,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 211\\&."
msgstr ""
@@ -2810,6 +2848,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 234\\&."
msgstr ""
@@ -2855,6 +2894,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 244\\&."
msgstr ""
@@ -2880,7 +2920,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Paths listed in I<ReadWritePaths=> are accessible from within the namespace "
"with the same access modes as from outside of it\\&. Paths listed in "
@@ -2975,7 +3015,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"Please be extra careful when applying these options to API file systems (a "
"list of them could be found in I<MountAPIVPS=>), since they may be required "
@@ -3004,6 +3044,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 231\\&."
msgstr ""
@@ -3058,6 +3099,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 238\\&."
msgstr ""
@@ -3118,6 +3160,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Enabling this option will install a system call filter to block low-level I/"
"O system calls that are grouped in the I<@raw-io> set, remove B<CAP_MKNOD> "
@@ -3230,6 +3273,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 242\\&."
msgstr ""
@@ -3319,6 +3363,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Note that this functionality might not be available, for example if KSM is "
"disabled in the kernel, or the kernel doesn\\*(Aqt support controlling KSM "
@@ -3429,6 +3474,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If set, writes to the hardware clock or system "
"clock will be denied\\&. Defaults to off\\&. Enabling this option removes "
@@ -3452,6 +3498,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 245\\&."
msgstr ""
@@ -3463,6 +3510,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If true, kernel variables accessible through /"
"proc/sys/, /sys/, /proc/sysrq-trigger, /proc/latency_stats, /proc/acpi, /"
@@ -3487,6 +3535,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If true, explicit module loading will be "
"denied\\&. This allows module load and unload operations to be turned off on "
@@ -3512,6 +3561,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If true, access to the kernel log ring buffer "
"will be denied\\&. It is recommended to turn this on for most services that "
@@ -3552,6 +3602,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Restricts the set of socket address families accessible to the processes of "
"this unit\\&. Takes \"none\", or a space-separated list of address family "
@@ -3854,6 +3905,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Restricts access to Linux namespace functionality for the processes of this "
"unit\\&. For details about Linux namespaces, see B<namespaces>(7)\\&. Either "
@@ -3922,6 +3974,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If set, locks down the B<personality>(2) "
"system call so that the kernel execution domain may not be changed from the "
@@ -3938,6 +3991,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If set, attempts to create memory mappings that "
"are writable and executable at the same time, or to change existing memory "
@@ -3973,6 +4027,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If set, any attempts to enable realtime "
"scheduling in a process of the unit are refused\\&. This restricts access to "
@@ -3993,6 +4048,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a boolean argument\\&. If set, any attempts to set the set-user-ID "
"(SUID) or set-group-ID (SGID) bits on files or directories will be denied "
@@ -4075,8 +4131,8 @@ msgid ""
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid ""
"Other file system namespace unit settings \\(em I<PrivateMounts=>, "
"I<PrivateTmp=>, I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, "
@@ -4088,6 +4144,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 239\\&."
msgstr ""
@@ -4167,6 +4224,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a space-separated list of system call names\\&. If this setting is "
"used, all system calls executed by the unit processes except for the listed "
@@ -4747,6 +4805,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a space-separated list of architecture identifiers to include in the "
"system call filter\\&. The known architecture identifiers are the same as "
@@ -4801,6 +4860,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Takes a space-separated list of system call names\\&. If this setting is "
"used, all system calls executed by the unit processes for the listed ones "
@@ -4912,6 +4972,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Similar to I<Environment=>, but reads the environment variables from a text "
"file\\&. The text file should contain newline-separated variable "
@@ -4927,6 +4988,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"In the file, an unquoted value after the \"=\" is parsed with the same "
"backslash-escape rules as \\m[blue]B<POSIX shell unquoted "
@@ -4942,6 +5004,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"In the file, a \"\\*(Aq\"-quoted value after the \"=\" can span multiple "
"lines and contain any character verbatim other than single quote, like "
@@ -4952,6 +5015,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"In the file, a \"\"\"-quoted value after the \"=\" can span multiple lines, "
"and the same escape sequences are recognized as in \\m[blue]B<POSIX shell "
@@ -5047,6 +5111,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 228\\&."
msgstr ""
@@ -5175,7 +5240,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"The B<socket> option is valid in socket-activated services only, and "
"requires the relevant socket unit file (see B<systemd.socket>(5) for "
@@ -5285,8 +5350,8 @@ msgid ""
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid ""
"The B<file:>I<path> option may be used to connect a specific file system "
"object to standard output\\&. The semantics are similar to the same option "
@@ -5353,8 +5418,8 @@ msgid ""
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid ""
"If the standard output (or error output, see below) of a unit is connected "
"to the journal or the kernel log buffer, the unit will implicitly gain a "
@@ -5496,6 +5561,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 236\\&."
msgstr ""
@@ -5556,6 +5622,13 @@ msgid ""
msgstr ""
#. type: Plain text
+#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed
+msgid ""
+"Note that this functionality is currently only available in system services, "
+"not in per-user services\\&."
+msgstr ""
+
+#. type: Plain text
#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
msgid "I<LogRateLimitIntervalSec=>, I<LogRateLimitBurst=>"
@@ -5563,6 +5636,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Configures the rate limiting that is applied to log messages generated by "
"this unit\\&. If, in the time interval defined by "
@@ -5584,6 +5658,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 240\\&."
msgstr ""
@@ -5618,8 +5693,8 @@ msgid ""
msgstr ""
#. type: Plain text
-#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide
-#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed
+#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6
+#: opensuse-tumbleweed
msgid ""
"Log messages are tested against denied patterns (if any), then against "
"allowed patterns (if any)\\&. If a log message matches any of the denied "
@@ -5643,6 +5718,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 253\\&."
msgstr ""
@@ -5927,9 +6003,9 @@ msgstr ""
msgid ""
"If an absolute path referring to a directory is specified, every file in "
"that directory (recursively) will be loaded as a separate credential\\&. The "
-"ID for each credential will be the provided ID suffixed with "
-"\"_$FILENAME\" (e\\&.g\\&., \"Key_file1\")\\&. When loading from a "
-"directory, symlinks will be ignored\\&."
+"ID for each credential will be the provided ID suffixed with \"_$FILENAME\" "
+"(e\\&.g\\&., \"Key_file1\")\\&. When loading from a directory, symlinks will "
+"be ignored\\&."
msgstr ""
#. type: Plain text
@@ -5982,7 +6058,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
-#: opensuse-tumbleweed
+#: opensuse-leap-15-6 opensuse-tumbleweed
msgid ""
"In order to reference the path a credential may be read from within a "
"I<ExecStart=> command line use \"${CREDENTIALS_DIRECTORY}/mycred\", e\\&."
@@ -6202,6 +6278,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 225\\&."
msgstr ""
@@ -6338,6 +6415,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"Colon-separated list of directories to use when launching executables\\&. "
"B<systemd> uses a fixed value of \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/"
@@ -6349,6 +6427,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 208\\&."
msgstr ""
@@ -6374,6 +6453,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"User name (twice), home directory, and the login shell\\&. I<$USER> is set "
"unconditionally, while I<$HOME>, I<$LOGNAME>, and I<$SHELL> are only set for "
@@ -6750,6 +6830,7 @@ msgstr ""
#. type: tbl table
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
#, no-wrap
msgid "Service did not run because I<ExecCondition=> failed\\&."
msgstr ""
@@ -6763,6 +6844,7 @@ msgstr ""
#. type: tbl table
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
#, no-wrap
msgid "A service process was terminated by the Out-Of-Memory (OOM) killer\\&."
msgstr ""
@@ -7092,6 +7174,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "Added in version 252\\&."
msgstr ""
@@ -7119,6 +7202,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid ""
"The maximum number of file descriptors that may be stored in the manager for "
"the service\\&. This variable is set when the file descriptor store is "
@@ -8929,6 +9013,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "unicode noncharacters"
msgstr ""
@@ -8947,6 +9032,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "unicode byte order mark"
msgstr ""
@@ -8965,6 +9051,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "POSIX shell unquoted text"
msgstr ""
@@ -8985,6 +9072,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "POSIX shell single-quoted text"
msgstr ""
@@ -9005,6 +9093,7 @@ msgstr ""
#. type: Plain text
#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron
+#: opensuse-tumbleweed
msgid "POSIX shell double-quoted text"
msgstr ""
@@ -9152,13 +9241,13 @@ msgid ""
msgstr ""
#. type: TH
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
#, no-wrap
msgid "systemd 254"
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"To make sure making ephemeral copies can be made efficiently, the root "
"directory or root image should be located on the same filesystem as /var/lib/"
@@ -9170,7 +9259,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
msgid ""
"In order to allow propagating mounts at runtime in a safe manner, /run/"
"systemd/propagate on the host will be used to set up new mounts, and /run/"
@@ -9179,7 +9268,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"A read-only OverlayFS will be set up on top of /usr/ and /opt/ "
"hierarchies\\&. The order in which the images are listed will determine the "
@@ -9188,7 +9277,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Each image must carry a /usr/lib/extension-release\\&.d/extension-release\\&."
"IMAGE file, with the appropriate metadata which matches I<RootImage=>/"
@@ -9199,7 +9288,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"A read-only OverlayFS will be set up on top of /usr/ and /opt/ "
"hierarchies\\&. The order in which the directories are listed will determine "
@@ -9208,7 +9297,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Each directory must contain a /usr/lib/extension-release\\&.d/extension-"
"release\\&.IMAGE file, with the appropriate metadata which matches "
@@ -9216,7 +9305,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If true, ensures that the service process and "
"all its children can never gain new privileges through B<execve()> (e\\&."
@@ -9238,8 +9327,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm fedora-40 fedora-rawhide opensuse-leap-15-6
-#: opensuse-tumbleweed
+#: debian-bookworm
msgid ""
"Takes a boolean argument\\&. If true, causes B<SIGPIPE> to be ignored in the "
"executed process\\&. Defaults to true because B<SIGPIPE> generally is useful "
@@ -9247,7 +9335,28 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm fedora-40 opensuse-leap-15-6
+msgid ""
+"Takes a boolean argument or the special values \"full\" or \"strict\"\\&. If "
+"true, mounts the /usr/ and the boot loader directories (/boot and /efi) read-"
+"only for processes invoked by this unit\\&. If set to \"full\", the /etc/ "
+"directory is mounted read-only, too\\&. If set to \"strict\" the entire file "
+"system hierarchy is mounted read-only, except for the API file system "
+"subtrees /dev/, /proc/ and /sys/ (protect these directories using "
+"I<PrivateDevices=>, I<ProtectKernelTunables=>, I<ProtectControlGroups=>)\\&. "
+"This setting ensures that any modification of the vendor-supplied operating "
+"system (and optionally its configuration, and local mounts) is prohibited "
+"for the service\\&. It is recommended to enable this setting for all long-"
+"running services, unless they are involved with system updates or need to "
+"modify the operating system in other ways\\&. If this option is used, "
+"I<ReadWritePaths=> may be used to exclude specific directories from being "
+"made read-only\\&. This setting is implied if I<DynamicUser=> is set\\&. "
+"This setting cannot ensure protection in all cases\\&. In general it has the "
+"same limitations as I<ReadOnlyPaths=>, see below\\&. Defaults to off\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-bookworm
msgid ""
"Paths listed in I<ReadWritePaths=> are accessible from within the namespace "
"with the same access modes as from outside of it\\&. Paths listed in "
@@ -9272,7 +9381,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Enabling this option will install a system call filter to block low-level I/"
"O system calls that are grouped in the I<@raw-io> set, remove B<CAP_MKNOD> "
@@ -9293,7 +9402,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Note that this functionality might not be available, for example if KSM is "
"disabled in the kernel, or the kernel doesn\\*(Aqt support controlling KSM "
@@ -9301,7 +9410,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"If this setting is on, but the unit doesn\\*(Aqt have the B<CAP_SYS_ADMIN> "
"capability (e\\&.g\\&. services for which I<User=> is set), "
@@ -9309,7 +9418,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If set, writes to the hardware clock or system "
"clock will be denied\\&. Defaults to off\\&. Enabling this option removes "
@@ -9326,7 +9435,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If true, kernel variables accessible through /"
"proc/sys/, /sys/, /proc/sysrq-trigger, /proc/latency_stats, /proc/acpi, /"
@@ -9347,7 +9456,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If true, explicit module loading will be "
"denied\\&. This allows module load and unload operations to be turned off on "
@@ -9369,7 +9478,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If true, access to the kernel log ring buffer "
"will be denied\\&. It is recommended to turn this on for most services that "
@@ -9385,7 +9494,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Restricts the set of socket address families accessible to the processes of "
"this unit\\&. Takes \"none\", or a space-separated list of address family "
@@ -9413,7 +9522,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Restricts access to Linux namespace functionality for the processes of this "
"unit\\&. For details about Linux namespaces, see B<namespaces>(7)\\&. Either "
@@ -9445,7 +9554,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If set, locks down the B<personality>(2) "
"system call so that the kernel execution domain may not be changed from the "
@@ -9457,7 +9566,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If set, attempts to create memory mappings that "
"are writable and executable at the same time, or to change existing memory "
@@ -9488,7 +9597,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If set, any attempts to enable realtime "
"scheduling in a process of the unit are refused\\&. This restricts access to "
@@ -9504,7 +9613,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a boolean argument\\&. If set, any attempts to set the set-user-ID "
"(SUID) or set-group-ID (SGID) bits on files or directories will be denied "
@@ -9521,7 +9630,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a space-separated list of system call names\\&. If this setting is "
"used, all system calls executed by the unit processes except for the listed "
@@ -9551,7 +9660,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a space-separated list of architecture identifiers to include in the "
"system call filter\\&. The known architecture identifiers are the same as "
@@ -9566,7 +9675,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Takes a space-separated list of system call names\\&. If this setting is "
"used, all system calls executed by the unit processes for the listed ones "
@@ -9584,7 +9693,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Similar to I<Environment=>, but reads the environment variables from a text "
"file\\&. The text file should contain newline-separated variable "
@@ -9598,7 +9707,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"In the file, an unquoted value after the \"=\" is parsed with the same "
"backslash-escape rules as \\m[blue]B<unquoted "
@@ -9613,7 +9722,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"In the file, a \"\\*(Aq\"-quoted value after the \"=\" can span multiple "
"lines and contain any character verbatim other than single quote, like "
@@ -9623,7 +9732,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"In the file, a \"\"\"-quoted value after the \"=\" can span multiple lines, "
"and the same escape sequences are recognized as in \\m[blue]B<double-quoted "
@@ -9636,7 +9745,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
msgid ""
"The B<socket> option is valid in socket-activated services only, and "
"requires the relevant socket unit file (see B<systemd.socket>(5) for "
@@ -9648,7 +9757,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Configures the rate limiting that is applied to log messages generated by "
"this unit\\&. If, in the time interval defined by "
@@ -9669,7 +9778,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6
+#: debian-bookworm
msgid ""
"In order to reference the path a credential may be read from within a "
"I<ExecStart=> command line use \"${CREDENTIALS_DIRECTORY}/mycred\", e\\&."
@@ -9679,7 +9788,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"Colon-separated list of directories to use when launching executables\\&. "
"B<systemd> uses a fixed value of \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/"
@@ -9691,7 +9800,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"User name (twice), home directory, and the login shell\\&. The variables are "
"set for the units that have I<User=> set, which includes user B<systemd> "
@@ -9699,7 +9808,7 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid ""
"If the file descriptor store is enabled for a service (i\\&.e\\&. "
"I<FileDescriptorStoreMax=> is set to a non-zero value, see B<systemd."
@@ -9711,26 +9820,163 @@ msgid ""
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid "noncharacters"
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid "byte order mark"
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid "unquoted text"
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid "single-quoted text"
msgstr ""
#. type: Plain text
-#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed
+#: debian-bookworm opensuse-leap-15-6
msgid "double-quoted text"
msgstr ""
+
+#. type: TH
+#: debian-unstable fedora-rawhide
+#, no-wrap
+msgid "systemd 256~rc3"
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Takes a directory path relative to the host\\*(Aqs root directory (i\\&."
+"e\\&. the root of the system running the service manager)\\&. Sets the root "
+"directory for executed processes, with the B<pivot_root>(2) or "
+"B<chroot>(2) system call\\&. If this is used, it must be ensured that the "
+"process binary and all its auxiliary files are available in the new root\\&. "
+"Note that setting this parameter might result in additional dependencies to "
+"be added to the unit (see above)\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"In place of the directory path a \"\\&.v/\" versioned directory may be "
+"specified, see B<systemd.v>(7) for details\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"In place of the image path a \"\\&.v/\" versioned directory may be "
+"specified, see B<systemd.v>(7) for details\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Using this option implies that a mount namespace is allocated for the unit, "
+"i\\&.e\\&. it implies the effect of I<PrivateMounts=> (see below)\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Takes a boolean parameter that controls whether to set the I<$HOME>, "
+"I<$LOGNAME>, and I<$SHELL> environment variables\\&. If not set, this "
+"defaults to true if I<User=>, I<DynamicUser=> or I<PAMName=> are set, false "
+"otherwise\\&. If set to true, the variables will always be set for system "
+"services, i\\&.e\\&. even when the default user \"root\" is used\\&. If set "
+"to false, the mentioned variables are not set by the service manager, no "
+"matter whether I<User=>, I<DynamicUser=>, or I<PAMName=> are used or not\\&. "
+"This option normally has no effect on services of the per-user service "
+"manager, since in that case these variables are typically inherited from "
+"user manager\\*(Aqs own environment anyway\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Note that the various options that turn directories read-only (such as "
+"I<ProtectSystem=>, I<ReadOnlyPaths=>, \\&...) do not affect the ability for "
+"programs to connect to and communicate with B<AF_UNIX> sockets in these "
+"directories\\&. These options cannot be used to lock down access to IPC "
+"services hence\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Other file system namespace unit settings \\(em I<PrivateTmp=>, "
+"I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, I<ReadOnlyPaths=>, "
+"I<InaccessiblePaths=>, I<ReadWritePaths=>, I<BindPaths=>, "
+"I<BindReadOnlyPaths=>, \\&... \\(em also enable file system namespacing in a "
+"fashion equivalent to this option\\&. Hence it is primarily useful to "
+"explicitly request this behaviour if none of the other settings are used\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"The B<file:>I<path> option may be used to connect a specific file system "
+"object to standard output\\&. The semantics are similar to the same option "
+"of I<StandardInput=>, see above\\&. If I<path> refers to a regular file on "
+"the filesystem, it is opened (created if it doesn\\*(Aqt exist yet using "
+"privileges of the user executing the systemd process) for writing at the "
+"beginning of the file, but without truncating it\\&. If standard input and "
+"output are directed to the same file path, it is opened only once \\(em for "
+"reading as well as writing \\(em and duplicated\\&. This is particularly "
+"useful when the specified path refers to an B<AF_UNIX> socket in the file "
+"system, as in that case only a single stream connection is created for both "
+"input and output\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"If the standard output (or error output, see below) of a unit is connected "
+"to the journal or the kernel log buffer, the unit will implicitly gain a "
+"dependency of type I<After=> on systemd-journald\\&.socket (also see the "
+"\"Implicit Dependencies\" section above)\\&. Also note that in this case "
+"stdout (or stderr, see below) will be an B<AF_UNIX> stream socket, and not a "
+"pipe or FIFO that can be reopened\\&. This means when executing shell "
+"scripts the construct B<echo \"hello\" E<gt> /dev/stderr> for writing text "
+"to stderr will not work\\&. To mitigate this use the construct B<echo "
+"\"hello\" E<gt>&2> instead, which is mostly equivalent and avoids this "
+"pitfall\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Log messages are tested against denied patterns (if any), then against "
+"allowed patterns (if any)\\&. If a log message matches any of the denied "
+"patterns, it is discarded immediately without considering allowed "
+"patterns\\&. Remaining log messages are tested against allowed patterns\\&. "
+"Messages matching against none of the allowed pattern are discarded\\&. If "
+"no allowed patterns are defined, then all messages are processed directly "
+"after going through denied filters\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Note that if the path is not specified or a valid credential identifier is "
+"given, i\\&.e\\&. in the above two cases, a missing credential is not "
+"considered fatal\\&."
+msgstr ""
+
+#. type: Plain text
+#: debian-unstable fedora-rawhide
+msgid ""
+"Note that encrypted credentials targeted for services of the per-user "
+"service manager must be encrypted with B<systemd-creds encrypt --user>, and "
+"those for the system service manager without the B<--user> switch\\&. "
+"Encrypted credentials are always targeted to a specific user or the system "
+"as a whole, and it is ensured that per-user service managers cannot decrypt "
+"secrets intended for the system or for other users\\&."
+msgstr ""