1 # Run systemd-journald with the hat ("^") Smack label.
3 # The journal daemon needs global read access to gather information
4 # about the services spawned by systemd. The hat label is intended
5 # for this purpose. The journal daemon is the only part of the
6 # System domain that needs read access to the User domain. Giving
7 # the journal daemon the hat label means that we can remove the
8 # System domain's read access to the User domain and we can avoid
9 # hard-coding a specific label name for that domain.
11 # Original author: Casey Schaufler <casey@schaufler-ca.com>
13 # This is considered a configuration change and thus distro specific.