[systemd-devel] code=exited, status=226/NAMESPACE

[Reindl Harald]

OS: Fedora 25
Vesion: systemd-231-17.fc25.x86_64
Kernel: 4.12.14-200.fc25.x86_64

what the hell is that?
shortly after reboot "systemctl status" says "running"
but nothing in /var/log/messages (yes many people don't linke journalctl)

[root at fileserver:~]$ systemctl status rsyslog
? rsyslog.service - Syslog Service
    Loaded: loaded (/etc/systemd/system/rsyslog.service; enabled; vendor 
preset: enabled)
    Active: activating (auto-restart) (Result: exit-code) since Sa 
2017-09-30 02:37:53 CEST; 3s ago
   Process: 1127 ExecStart=/usr/sbin/rsyslogd -n $SYSLOGD_OPTIONS 
(code=exited, status=226/NAMESPACE)
  Main PID: 1127 (code=exited, status=226/NAMESPACE)

Sep 30 02:37:53 fileserver.thelounge.net systemd[1]: rsyslog.service: 
Unit entered failed state.
Sep 30 02:37:53 fileserver.thelounge.net systemd[1]: rsyslog.service: 
Failed with result 'exit-code'
______________________________

and yes that unit runs on dozens of machines 1:1 with the same environment

[Unit]
Description=Syslog Service
After=network.service systemd-networkd.service network-online.target 
mysqld.service mysqld-dbmail.service

[Service]
EnvironmentFile=-/etc/sysconfig/rsyslog
ExecStart=/usr/sbin/rsyslogd -n $SYSLOGD_OPTIONS
Sockets=syslog.socket
StandardOutput=null
Restart=always
RestartSec=5
TimeoutStopSec=1
CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_SYSLOG
SystemCallFilter=~acct modify_ldt add_key adjtimex clock_adjtime 
delete_module fanotify_init finit_module get_mempolicy init_module 
io_destroy io_getevents iopl ioperm io_setup io_submit io_cancel kcmp 
kexec_load keyctl lookup_dcookie mbind migrate_pages mount move_pages 
open_by_handle_at perf_event_open pivot_root process_vm_readv 
process_vm_writev ptrace remap_file_pages request_key set_mempolicy 
swapoff swapon umount2 uselib vmsplice
ReadOnlyDirectories=/etc
ReadOnlyDirectories=/usr

InaccessibleDirectories=-/boot
InaccessibleDirectories=-/home
InaccessibleDirectories=-/media
InaccessibleDirectories=-/root
InaccessibleDirectories=-/run/user

[Install]
WantedBy=multi-user.target
Alias=syslog.service