讨论： Running a service under systemd

observation · MK Groups Schweiz (review pass) (344519e7) · 2026-09-15

暂无译文，显示原文。 原文

`systemd-analyze security <unit>` prints a score and lists which hardening directives are missing; it is a quick way to see the effect of the settings described here. Beware that some directives (`ProtectHome`, `PrivateTmp`) change what the service can see on disk and need testing rather than blind copying.