diff options
Diffstat (limited to 'templates/man5/systemd.exec.5.pot')
| -rw-r--r-- | templates/man5/systemd.exec.5.pot | 400 |
1 files changed, 323 insertions, 77 deletions
diff --git a/templates/man5/systemd.exec.5.pot b/templates/man5/systemd.exec.5.pot index c568b2b2..0f3ee3a0 100644 --- a/templates/man5/systemd.exec.5.pot +++ b/templates/man5/systemd.exec.5.pot @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" -"POT-Creation-Date: 2024-03-01 17:10+0100\n" +"POT-Creation-Date: 2024-06-01 06:27+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <LL@li.org>\n" @@ -24,7 +24,7 @@ msgid "SYSTEMD\\&.EXEC" msgstr "" #. type: TH -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "systemd 255" msgstr "" @@ -197,6 +197,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 250\\&." msgstr "" @@ -230,8 +231,8 @@ msgid "I<RootDirectory=>" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Takes a directory path relative to the host\\*(Aqs root directory (i\\&." "e\\&. the root of the system running the service manager)\\&. Sets the root " @@ -353,6 +354,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 233\\&." msgstr "" @@ -387,6 +389,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 247\\&." msgstr "" @@ -410,6 +413,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "To make sure making ephemeral copies can be made efficiently, the root " "directory or root image should be located on the same filesystem as /var/lib/" @@ -422,6 +426,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 254\\&." msgstr "" @@ -465,6 +470,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 246\\&." msgstr "" @@ -600,7 +606,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "In order to allow propagating mounts at runtime in a safe manner, /run/" "systemd/propagate/ on the host will be used to set up new mounts, and /run/" @@ -618,14 +624,14 @@ msgstr "" #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" -"Takes one of \"noaccess\", \"invisible\", \"ptraceable\" or " -"\"default\" (which it defaults to)\\&. When set, this controls the " -"\"hidepid=\" mount option of the \"procfs\" instance for the unit that " -"controls which directories with process metainformation (/proc/I<PID>) are " -"visible and accessible: when set to \"noaccess\" the ability to access most " -"of other users\\*(Aq process metadata in /proc/ is taken away for processes " -"of the service\\&. When set to \"invisible\" processes owned by other users " -"are hidden from /proc/\\&. If \"ptraceable\" all processes that cannot be " +"Takes one of \"noaccess\", \"invisible\", \"ptraceable\" or \"default\" " +"(which it defaults to)\\&. When set, this controls the \"hidepid=\" mount " +"option of the \"procfs\" instance for the unit that controls which " +"directories with process metainformation (/proc/I<PID>) are visible and " +"accessible: when set to \"noaccess\" the ability to access most of other " +"users\\*(Aq process metadata in /proc/ is taken away for processes of the " +"service\\&. When set to \"invisible\" processes owned by other users are " +"hidden from /proc/\\&. If \"ptraceable\" all processes that cannot be " "B<ptrace()>\\*(Aqed by a process are hidden to it\\&. If \"default\" no " "restrictions on /proc/ access or visibility are made\\&. For further details " "see \\m[blue]B<The /proc Filesystem>\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&. It is " @@ -826,6 +832,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "A read-only OverlayFS will be set up on top of /usr/ and /opt/ hierarchies " "for sysext images and /etc/ hierarchy for confext images\\&. The order in " @@ -858,6 +865,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Each sysext image must carry a /usr/lib/extension-release\\&.d/extension-" "release\\&.IMAGE file while each confext image must carry a /etc/extension-" @@ -870,6 +878,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 248\\&." msgstr "" @@ -891,6 +900,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "A read-only OverlayFS will be set up on top of /usr/ and /opt/ hierarchies " "for sysext images and /etc/ hierarchy for confext images\\&. The order in " @@ -920,6 +930,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Each sysext directory must contain a /usr/lib/extension-release\\&.d/" "extension-release\\&.IMAGE file while each confext directory must carry a /" @@ -938,6 +949,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 251\\&." msgstr "" @@ -1091,6 +1103,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 232\\&." msgstr "" @@ -1116,11 +1129,12 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "I<SetLoginEnvironment=>" msgstr "" #. type: Plain text -#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed msgid "" "Takes a boolean parameter that controls whether to set I<$HOME>, " "I<$LOGNAME>, and I<$SHELL> environment variables\\&. If unset, this is " @@ -1134,6 +1148,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 255\\&." msgstr "" @@ -1315,6 +1330,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 229\\&." msgstr "" @@ -1333,6 +1349,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If true, ensures that the service process and " "all its children can never gain new privileges through B<execve()> (e\\&." @@ -1357,6 +1374,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 187\\&." msgstr "" @@ -1408,6 +1426,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 209\\&." msgstr "" @@ -1430,6 +1449,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 210\\&." msgstr "" @@ -1463,6 +1483,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 218\\&." msgstr "" @@ -2042,6 +2063,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 235\\&." msgstr "" @@ -2123,7 +2145,8 @@ msgid "I<IgnoreSIGPIPE=>" msgstr "" #. type: Plain text -#: archlinux debian-unstable mageia-cauldron +#: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If true, B<SIGPIPE> is ignored in the executed " "process\\&. Defaults to true since B<SIGPIPE> is generally only useful in " @@ -2244,6 +2267,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 243\\&." msgstr "" @@ -2343,14 +2367,23 @@ msgid "" msgstr "" #. type: Plain text +#: archlinux mageia-cauldron opensuse-tumbleweed +msgid "" +"Note that the various options that turn directories read-only (such as " +"I<ProtectSystem=>, I<ReadOnlyPaths=>, \\&...) do not affect the ability for " +"programs to connect to and communicate with B<AF_UNIX> sockets in these " +"directores\\&. These options cannot be used to lock down access to IPC " +"services hence\\&." +msgstr "" + +#. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "I<ProtectSystem=>" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed msgid "" "Takes a boolean argument or the special values \"full\" or \"strict\"\\&. If " "true, mounts the /usr/ and the boot loader directories (/boot and /efi) read-" @@ -2365,13 +2398,17 @@ msgid "" "running services, unless they are involved with system updates or need to " "modify the operating system in other ways\\&. If this option is used, " "I<ReadWritePaths=> may be used to exclude specific directories from being " -"made read-only\\&. This setting is implied if I<DynamicUser=> is set\\&. " -"This setting cannot ensure protection in all cases\\&. In general it has the " -"same limitations as I<ReadOnlyPaths=>, see below\\&. Defaults to off\\&." +"made read-only\\&. Similar, I<StateDirectory=>, I<LogsDirectory=>, \\&... " +"and related directory settings (see below) also exclude the specific " +"directories from the effect of I<ProtectSystem=>\\&. This setting is implied " +"if I<DynamicUser=> is set\\&. This setting cannot ensure protection in all " +"cases\\&. In general it has the same limitations as I<ReadOnlyPaths=>, see " +"below\\&. Defaults to off\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 214\\&." msgstr "" @@ -2786,6 +2823,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 211\\&." msgstr "" @@ -2810,6 +2848,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 234\\&." msgstr "" @@ -2855,6 +2894,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 244\\&." msgstr "" @@ -2880,7 +2920,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Paths listed in I<ReadWritePaths=> are accessible from within the namespace " "with the same access modes as from outside of it\\&. Paths listed in " @@ -2975,7 +3015,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Please be extra careful when applying these options to API file systems (a " "list of them could be found in I<MountAPIVPS=>), since they may be required " @@ -3004,6 +3044,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 231\\&." msgstr "" @@ -3058,6 +3099,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 238\\&." msgstr "" @@ -3118,6 +3160,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Enabling this option will install a system call filter to block low-level I/" "O system calls that are grouped in the I<@raw-io> set, remove B<CAP_MKNOD> " @@ -3230,6 +3273,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 242\\&." msgstr "" @@ -3319,6 +3363,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Note that this functionality might not be available, for example if KSM is " "disabled in the kernel, or the kernel doesn\\*(Aqt support controlling KSM " @@ -3429,6 +3474,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If set, writes to the hardware clock or system " "clock will be denied\\&. Defaults to off\\&. Enabling this option removes " @@ -3452,6 +3498,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 245\\&." msgstr "" @@ -3463,6 +3510,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If true, kernel variables accessible through /" "proc/sys/, /sys/, /proc/sysrq-trigger, /proc/latency_stats, /proc/acpi, /" @@ -3487,6 +3535,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If true, explicit module loading will be " "denied\\&. This allows module load and unload operations to be turned off on " @@ -3512,6 +3561,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If true, access to the kernel log ring buffer " "will be denied\\&. It is recommended to turn this on for most services that " @@ -3552,6 +3602,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Restricts the set of socket address families accessible to the processes of " "this unit\\&. Takes \"none\", or a space-separated list of address family " @@ -3854,6 +3905,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Restricts access to Linux namespace functionality for the processes of this " "unit\\&. For details about Linux namespaces, see B<namespaces>(7)\\&. Either " @@ -3922,6 +3974,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If set, locks down the B<personality>(2) " "system call so that the kernel execution domain may not be changed from the " @@ -3938,6 +3991,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If set, attempts to create memory mappings that " "are writable and executable at the same time, or to change existing memory " @@ -3973,6 +4027,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If set, any attempts to enable realtime " "scheduling in a process of the unit are refused\\&. This restricts access to " @@ -3993,6 +4048,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If set, any attempts to set the set-user-ID " "(SUID) or set-group-ID (SGID) bits on files or directories will be denied " @@ -4075,8 +4131,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Other file system namespace unit settings \\(em I<PrivateMounts=>, " "I<PrivateTmp=>, I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, " @@ -4088,6 +4144,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 239\\&." msgstr "" @@ -4167,6 +4224,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a space-separated list of system call names\\&. If this setting is " "used, all system calls executed by the unit processes except for the listed " @@ -4747,6 +4805,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a space-separated list of architecture identifiers to include in the " "system call filter\\&. The known architecture identifiers are the same as " @@ -4801,6 +4860,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Takes a space-separated list of system call names\\&. If this setting is " "used, all system calls executed by the unit processes for the listed ones " @@ -4912,6 +4972,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Similar to I<Environment=>, but reads the environment variables from a text " "file\\&. The text file should contain newline-separated variable " @@ -4927,6 +4988,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "In the file, an unquoted value after the \"=\" is parsed with the same " "backslash-escape rules as \\m[blue]B<POSIX shell unquoted " @@ -4942,6 +5004,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "In the file, a \"\\*(Aq\"-quoted value after the \"=\" can span multiple " "lines and contain any character verbatim other than single quote, like " @@ -4952,6 +5015,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "In the file, a \"\"\"-quoted value after the \"=\" can span multiple lines, " "and the same escape sequences are recognized as in \\m[blue]B<POSIX shell " @@ -5047,6 +5111,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 228\\&." msgstr "" @@ -5175,7 +5240,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "The B<socket> option is valid in socket-activated services only, and " "requires the relevant socket unit file (see B<systemd.socket>(5) for " @@ -5285,8 +5350,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "The B<file:>I<path> option may be used to connect a specific file system " "object to standard output\\&. The semantics are similar to the same option " @@ -5353,8 +5418,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "If the standard output (or error output, see below) of a unit is connected " "to the journal or the kernel log buffer, the unit will implicitly gain a " @@ -5496,6 +5561,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 236\\&." msgstr "" @@ -5556,6 +5622,13 @@ msgid "" msgstr "" #. type: Plain text +#: archlinux debian-unstable fedora-rawhide mageia-cauldron opensuse-tumbleweed +msgid "" +"Note that this functionality is currently only available in system services, " +"not in per-user services\\&." +msgstr "" + +#. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "I<LogRateLimitIntervalSec=>, I<LogRateLimitBurst=>" @@ -5563,6 +5636,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Configures the rate limiting that is applied to log messages generated by " "this unit\\&. If, in the time interval defined by " @@ -5584,6 +5658,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 240\\&." msgstr "" @@ -5618,8 +5693,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide -#: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed +#: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Log messages are tested against denied patterns (if any), then against " "allowed patterns (if any)\\&. If a log message matches any of the denied " @@ -5643,6 +5718,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 253\\&." msgstr "" @@ -5927,9 +6003,9 @@ msgstr "" msgid "" "If an absolute path referring to a directory is specified, every file in " "that directory (recursively) will be loaded as a separate credential\\&. The " -"ID for each credential will be the provided ID suffixed with " -"\"_$FILENAME\" (e\\&.g\\&., \"Key_file1\")\\&. When loading from a " -"directory, symlinks will be ignored\\&." +"ID for each credential will be the provided ID suffixed with \"_$FILENAME\" " +"(e\\&.g\\&., \"Key_file1\")\\&. When loading from a directory, symlinks will " +"be ignored\\&." msgstr "" #. type: Plain text @@ -5982,7 +6058,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron -#: opensuse-tumbleweed +#: opensuse-leap-15-6 opensuse-tumbleweed msgid "" "In order to reference the path a credential may be read from within a " "I<ExecStart=> command line use \"${CREDENTIALS_DIRECTORY}/mycred\", e\\&." @@ -6202,6 +6278,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 225\\&." msgstr "" @@ -6338,6 +6415,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "Colon-separated list of directories to use when launching executables\\&. " "B<systemd> uses a fixed value of \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/" @@ -6349,6 +6427,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 208\\&." msgstr "" @@ -6374,6 +6453,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "User name (twice), home directory, and the login shell\\&. I<$USER> is set " "unconditionally, while I<$HOME>, I<$LOGNAME>, and I<$SHELL> are only set for " @@ -6750,6 +6830,7 @@ msgstr "" #. type: tbl table #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed #, no-wrap msgid "Service did not run because I<ExecCondition=> failed\\&." msgstr "" @@ -6763,6 +6844,7 @@ msgstr "" #. type: tbl table #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed #, no-wrap msgid "A service process was terminated by the Out-Of-Memory (OOM) killer\\&." msgstr "" @@ -7092,6 +7174,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "Added in version 252\\&." msgstr "" @@ -7119,6 +7202,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "" "The maximum number of file descriptors that may be stored in the manager for " "the service\\&. This variable is set when the file descriptor store is " @@ -8929,6 +9013,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "unicode noncharacters" msgstr "" @@ -8947,6 +9032,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "unicode byte order mark" msgstr "" @@ -8965,6 +9051,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "POSIX shell unquoted text" msgstr "" @@ -8985,6 +9072,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "POSIX shell single-quoted text" msgstr "" @@ -9005,6 +9093,7 @@ msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron +#: opensuse-tumbleweed msgid "POSIX shell double-quoted text" msgstr "" @@ -9152,13 +9241,13 @@ msgid "" msgstr "" #. type: TH -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 #, no-wrap msgid "systemd 254" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "To make sure making ephemeral copies can be made efficiently, the root " "directory or root image should be located on the same filesystem as /var/lib/" @@ -9170,7 +9259,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm msgid "" "In order to allow propagating mounts at runtime in a safe manner, /run/" "systemd/propagate on the host will be used to set up new mounts, and /run/" @@ -9179,7 +9268,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "A read-only OverlayFS will be set up on top of /usr/ and /opt/ " "hierarchies\\&. The order in which the images are listed will determine the " @@ -9188,7 +9277,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Each image must carry a /usr/lib/extension-release\\&.d/extension-release\\&." "IMAGE file, with the appropriate metadata which matches I<RootImage=>/" @@ -9199,7 +9288,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "A read-only OverlayFS will be set up on top of /usr/ and /opt/ " "hierarchies\\&. The order in which the directories are listed will determine " @@ -9208,7 +9297,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Each directory must contain a /usr/lib/extension-release\\&.d/extension-" "release\\&.IMAGE file, with the appropriate metadata which matches " @@ -9216,7 +9305,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If true, ensures that the service process and " "all its children can never gain new privileges through B<execve()> (e\\&." @@ -9238,8 +9327,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm fedora-40 fedora-rawhide opensuse-leap-15-6 -#: opensuse-tumbleweed +#: debian-bookworm msgid "" "Takes a boolean argument\\&. If true, causes B<SIGPIPE> to be ignored in the " "executed process\\&. Defaults to true because B<SIGPIPE> generally is useful " @@ -9247,7 +9335,28 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm fedora-40 opensuse-leap-15-6 +msgid "" +"Takes a boolean argument or the special values \"full\" or \"strict\"\\&. If " +"true, mounts the /usr/ and the boot loader directories (/boot and /efi) read-" +"only for processes invoked by this unit\\&. If set to \"full\", the /etc/ " +"directory is mounted read-only, too\\&. If set to \"strict\" the entire file " +"system hierarchy is mounted read-only, except for the API file system " +"subtrees /dev/, /proc/ and /sys/ (protect these directories using " +"I<PrivateDevices=>, I<ProtectKernelTunables=>, I<ProtectControlGroups=>)\\&. " +"This setting ensures that any modification of the vendor-supplied operating " +"system (and optionally its configuration, and local mounts) is prohibited " +"for the service\\&. It is recommended to enable this setting for all long-" +"running services, unless they are involved with system updates or need to " +"modify the operating system in other ways\\&. If this option is used, " +"I<ReadWritePaths=> may be used to exclude specific directories from being " +"made read-only\\&. This setting is implied if I<DynamicUser=> is set\\&. " +"This setting cannot ensure protection in all cases\\&. In general it has the " +"same limitations as I<ReadOnlyPaths=>, see below\\&. Defaults to off\\&." +msgstr "" + +#. type: Plain text +#: debian-bookworm msgid "" "Paths listed in I<ReadWritePaths=> are accessible from within the namespace " "with the same access modes as from outside of it\\&. Paths listed in " @@ -9272,7 +9381,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Enabling this option will install a system call filter to block low-level I/" "O system calls that are grouped in the I<@raw-io> set, remove B<CAP_MKNOD> " @@ -9293,7 +9402,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Note that this functionality might not be available, for example if KSM is " "disabled in the kernel, or the kernel doesn\\*(Aqt support controlling KSM " @@ -9301,7 +9410,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "If this setting is on, but the unit doesn\\*(Aqt have the B<CAP_SYS_ADMIN> " "capability (e\\&.g\\&. services for which I<User=> is set), " @@ -9309,7 +9418,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If set, writes to the hardware clock or system " "clock will be denied\\&. Defaults to off\\&. Enabling this option removes " @@ -9326,7 +9435,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If true, kernel variables accessible through /" "proc/sys/, /sys/, /proc/sysrq-trigger, /proc/latency_stats, /proc/acpi, /" @@ -9347,7 +9456,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If true, explicit module loading will be " "denied\\&. This allows module load and unload operations to be turned off on " @@ -9369,7 +9478,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If true, access to the kernel log ring buffer " "will be denied\\&. It is recommended to turn this on for most services that " @@ -9385,7 +9494,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Restricts the set of socket address families accessible to the processes of " "this unit\\&. Takes \"none\", or a space-separated list of address family " @@ -9413,7 +9522,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Restricts access to Linux namespace functionality for the processes of this " "unit\\&. For details about Linux namespaces, see B<namespaces>(7)\\&. Either " @@ -9445,7 +9554,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If set, locks down the B<personality>(2) " "system call so that the kernel execution domain may not be changed from the " @@ -9457,7 +9566,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If set, attempts to create memory mappings that " "are writable and executable at the same time, or to change existing memory " @@ -9488,7 +9597,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If set, any attempts to enable realtime " "scheduling in a process of the unit are refused\\&. This restricts access to " @@ -9504,7 +9613,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a boolean argument\\&. If set, any attempts to set the set-user-ID " "(SUID) or set-group-ID (SGID) bits on files or directories will be denied " @@ -9521,7 +9630,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a space-separated list of system call names\\&. If this setting is " "used, all system calls executed by the unit processes except for the listed " @@ -9551,7 +9660,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a space-separated list of architecture identifiers to include in the " "system call filter\\&. The known architecture identifiers are the same as " @@ -9566,7 +9675,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Takes a space-separated list of system call names\\&. If this setting is " "used, all system calls executed by the unit processes for the listed ones " @@ -9584,7 +9693,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Similar to I<Environment=>, but reads the environment variables from a text " "file\\&. The text file should contain newline-separated variable " @@ -9598,7 +9707,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "In the file, an unquoted value after the \"=\" is parsed with the same " "backslash-escape rules as \\m[blue]B<unquoted " @@ -9613,7 +9722,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "In the file, a \"\\*(Aq\"-quoted value after the \"=\" can span multiple " "lines and contain any character verbatim other than single quote, like " @@ -9623,7 +9732,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "In the file, a \"\"\"-quoted value after the \"=\" can span multiple lines, " "and the same escape sequences are recognized as in \\m[blue]B<double-quoted " @@ -9636,7 +9745,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm msgid "" "The B<socket> option is valid in socket-activated services only, and " "requires the relevant socket unit file (see B<systemd.socket>(5) for " @@ -9648,7 +9757,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Configures the rate limiting that is applied to log messages generated by " "this unit\\&. If, in the time interval defined by " @@ -9669,7 +9778,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm msgid "" "In order to reference the path a credential may be read from within a " "I<ExecStart=> command line use \"${CREDENTIALS_DIRECTORY}/mycred\", e\\&." @@ -9679,7 +9788,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "Colon-separated list of directories to use when launching executables\\&. " "B<systemd> uses a fixed value of \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/" @@ -9691,7 +9800,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "User name (twice), home directory, and the login shell\\&. The variables are " "set for the units that have I<User=> set, which includes user B<systemd> " @@ -9699,7 +9808,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "" "If the file descriptor store is enabled for a service (i\\&.e\\&. " "I<FileDescriptorStoreMax=> is set to a non-zero value, see B<systemd." @@ -9711,26 +9820,163 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "noncharacters" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "byte order mark" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "unquoted text" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "single-quoted text" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 opensuse-tumbleweed +#: debian-bookworm opensuse-leap-15-6 msgid "double-quoted text" msgstr "" + +#. type: TH +#: debian-unstable fedora-rawhide +#, no-wrap +msgid "systemd 256~rc3" +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Takes a directory path relative to the host\\*(Aqs root directory (i\\&." +"e\\&. the root of the system running the service manager)\\&. Sets the root " +"directory for executed processes, with the B<pivot_root>(2) or " +"B<chroot>(2) system call\\&. If this is used, it must be ensured that the " +"process binary and all its auxiliary files are available in the new root\\&. " +"Note that setting this parameter might result in additional dependencies to " +"be added to the unit (see above)\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"In place of the directory path a \"\\&.v/\" versioned directory may be " +"specified, see B<systemd.v>(7) for details\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"In place of the image path a \"\\&.v/\" versioned directory may be " +"specified, see B<systemd.v>(7) for details\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Using this option implies that a mount namespace is allocated for the unit, " +"i\\&.e\\&. it implies the effect of I<PrivateMounts=> (see below)\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Takes a boolean parameter that controls whether to set the I<$HOME>, " +"I<$LOGNAME>, and I<$SHELL> environment variables\\&. If not set, this " +"defaults to true if I<User=>, I<DynamicUser=> or I<PAMName=> are set, false " +"otherwise\\&. If set to true, the variables will always be set for system " +"services, i\\&.e\\&. even when the default user \"root\" is used\\&. If set " +"to false, the mentioned variables are not set by the service manager, no " +"matter whether I<User=>, I<DynamicUser=>, or I<PAMName=> are used or not\\&. " +"This option normally has no effect on services of the per-user service " +"manager, since in that case these variables are typically inherited from " +"user manager\\*(Aqs own environment anyway\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Note that the various options that turn directories read-only (such as " +"I<ProtectSystem=>, I<ReadOnlyPaths=>, \\&...) do not affect the ability for " +"programs to connect to and communicate with B<AF_UNIX> sockets in these " +"directories\\&. These options cannot be used to lock down access to IPC " +"services hence\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Other file system namespace unit settings \\(em I<PrivateTmp=>, " +"I<PrivateDevices=>, I<ProtectSystem=>, I<ProtectHome=>, I<ReadOnlyPaths=>, " +"I<InaccessiblePaths=>, I<ReadWritePaths=>, I<BindPaths=>, " +"I<BindReadOnlyPaths=>, \\&... \\(em also enable file system namespacing in a " +"fashion equivalent to this option\\&. Hence it is primarily useful to " +"explicitly request this behaviour if none of the other settings are used\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"The B<file:>I<path> option may be used to connect a specific file system " +"object to standard output\\&. The semantics are similar to the same option " +"of I<StandardInput=>, see above\\&. If I<path> refers to a regular file on " +"the filesystem, it is opened (created if it doesn\\*(Aqt exist yet using " +"privileges of the user executing the systemd process) for writing at the " +"beginning of the file, but without truncating it\\&. If standard input and " +"output are directed to the same file path, it is opened only once \\(em for " +"reading as well as writing \\(em and duplicated\\&. This is particularly " +"useful when the specified path refers to an B<AF_UNIX> socket in the file " +"system, as in that case only a single stream connection is created for both " +"input and output\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"If the standard output (or error output, see below) of a unit is connected " +"to the journal or the kernel log buffer, the unit will implicitly gain a " +"dependency of type I<After=> on systemd-journald\\&.socket (also see the " +"\"Implicit Dependencies\" section above)\\&. Also note that in this case " +"stdout (or stderr, see below) will be an B<AF_UNIX> stream socket, and not a " +"pipe or FIFO that can be reopened\\&. This means when executing shell " +"scripts the construct B<echo \"hello\" E<gt> /dev/stderr> for writing text " +"to stderr will not work\\&. To mitigate this use the construct B<echo " +"\"hello\" E<gt>&2> instead, which is mostly equivalent and avoids this " +"pitfall\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Log messages are tested against denied patterns (if any), then against " +"allowed patterns (if any)\\&. If a log message matches any of the denied " +"patterns, it is discarded immediately without considering allowed " +"patterns\\&. Remaining log messages are tested against allowed patterns\\&. " +"Messages matching against none of the allowed pattern are discarded\\&. If " +"no allowed patterns are defined, then all messages are processed directly " +"after going through denied filters\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Note that if the path is not specified or a valid credential identifier is " +"given, i\\&.e\\&. in the above two cases, a missing credential is not " +"considered fatal\\&." +msgstr "" + +#. type: Plain text +#: debian-unstable fedora-rawhide +msgid "" +"Note that encrypted credentials targeted for services of the per-user " +"service manager must be encrypted with B<systemd-creds encrypt --user>, and " +"those for the system service manager without the B<--user> switch\\&. " +"Encrypted credentials are always targeted to a specific user or the system " +"as a whole, and it is ensured that per-user service managers cannot decrypt " +"secrets intended for the system or for other users\\&." +msgstr "" |