chore: import upstream snapshot with attribution

This commit is contained in:
wehub-resource-sync
2026-07-13 13:12:17 +08:00
commit cf8edb9f21
44281 changed files with 1655134 additions and 0 deletions
+10
View File
@@ -0,0 +1,10 @@
<header>Protect system files</header>
<p>Restricts write access to system directories using
<tt>ProtectSystem=</tt>. Stronger values provide stricter filesystem
protection.</p>
<p><tt>true</tt> makes core system directories such as <tt>/usr</tt> and
<tt>/boot</tt> read-only. <tt>full</tt> also protects <tt>/etc</tt>.
<tt>strict</tt> makes the filesystem broadly read-only except for API
filesystems and paths explicitly made writable.</p>
<p>Use <tt>ReadWritePaths=</tt> for directories the service still needs to
modify.</p>