[systemd-devel] Enable sandboxing options globally for all services

[Michael Biebl]

Am Mi., 9. Sept. 2020 um 21:40 Uhr schrieb Christopher Wong
<Christopher.Wong at axis.com>:
>
> Hi,
>
>
> Is there a way to turn on a sandboxing option for all services?

Recent versions of systemd allow to use global drop-in config
snippets. See the changelog of v244

        * Unit files now support top level dropin directories of the form
          <unit_type>.d/ (e.g. service.d/) that may be used to add configuration
          that affects all corresponding unit files.