Systemctl-logind.service fail to start

Ask Fedora
1

Hello,
I tried to harden my kernel by doing:
-Restricting access to sysfs by creating a drop in directory /etc/systemd/system/user@.service.d/sysfs.conf

-enabin hidepid with editing the file /etc/fstab and adding
proc /proc proc nosuid,nodev,noexec,hidepid=2,gid=proc 0 0

-creating a drop in directory for it /etc/systemd/system/systemd-logind.service.d/hidepid.conf

First i forgot to edit /etc/fstab and it messed up which i believe caused my system to beug and to froze on the loading screen. I edited the /etc/fstab but it still didn’t work, i tried to delte all of the change i made and re add them after but it still stayed the same.Plus I can’t seem to restart systemd-logind.service. After a lot of struggles i managed to delete all of my changes and the screen didn’t froze anymore and i was able to log in normaly.But there still seem to be a problem with systemd-logind.service as it says the state of systemctl is “degraded”.

My questions are:
How can i fix this problem?
Why hidepid and sysfs didn’t work?
What did i do wrong?

, if you need more information, such as all of the status of systemctl or else , i’ll provide

Thank you for your help

2

Share the exact outputyou are seeing that says the system is degraded as pre-formatted text please.

Also the output of systemctl - failed

3

Output of systemctl --failed:

image
image918×377 18 KB

What im seeing after it says degraded:

[potiron@ubuntu ~]$ systemctl status
● ubuntu
    State: degraded
    Units: 532 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 1 units
    Since: Wed 2023-07-19 21:58:46 CEST; 40min left
  systemd: 253.5-1.fc38
  Tainted: local-hwclock
   CGroup: /
           ├─init.scope
           │ └─1 /usr/lib/systemd/systemd rhgb --switched-root --system --deser>
           ├─system.slice
           │ ├─ModemManager.service
           │ │ └─1060 /usr/sbin/ModemManager
           │ ├─NetworkManager.service
           │ │ └─945 /usr/sbin/NetworkManager --no-daemon
           │ ├─abrt-journal-core.service
           │ │ └─1048 /usr/bin/abrt-dump-journal-core -D -T -f -e
           │ ├─abrt-oops.service
           │ │ └─1049 /usr/bin/abrt-dump-journal-oops -fxtD
           │ ├─abrt-xorg.service
           │ │ └─1052 /usr/bin/abrt-dump-journal-xorg -fxtD
           │ ├─abrtd.service
lines 1-23...skipping...
● ubuntu
    State: degraded
    Units: 532 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 1 units
    Since: Wed 2023-07-19 21:58:46 CEST; 40min left
  systemd: 253.5-1.fc38
  Tainted: local-hwclock
   CGroup: /
           ├─init.scope
           │ └─1 /usr/lib/systemd/systemd rhgb --switched-root --system --deserialize=35
           ├─system.slice
           │ ├─ModemManager.service
           │ │ └─1060 /usr/sbin/ModemManager
           │ ├─NetworkManager.service
           │ │ └─945 /usr/sbin/NetworkManager --no-daemon
           │ ├─abrt-journal-core.service
           │ │ └─1048 /usr/bin/abrt-dump-journal-core -D -T -f -e
           │ ├─abrt-oops.service
           │ │ └─1049 /usr/bin/abrt-dump-journal-oops -fxtD
           │ ├─abrt-xorg.service
           │ │ └─1052 /usr/bin/abrt-dump-journal-xorg -fxtD
           │ ├─abrtd.service
           │ │ └─981 /usr/sbin/abrtd -d -s
           │ ├─accounts-daemon.service
           │ │ └─957 /usr/libexec/accounts-daemon
           │ ├─alsa-state.service
           │ │ └─1053 /usr/sbin/alsactl -s -n 19 -c -E ALSA_CONFIG_PATH=/etc/alsa/alsactl.conf --initfile=/lib/alsa/init/00main rdaemon
           │ ├─auditd.service
           │ │ └─904 /sbin/auditd
           │ ├─avahi-daemon.service
           │ │ ├─946 "avahi-daemon: running [ubuntu.local]"
           │ │ └─982 "avahi-daemon: chroot helper"
           │ ├─bluetooth.service
           │ │ └─947 /usr/libexec/bluetooth/bluetoothd
           │ ├─chronyd.service
           │ │ └─972 /usr/sbin/chronyd -F 2
           │ ├─colord.service
           │ │ └─1409 /usr/libexec/colord
           │ ├─cups.service
           │ │ └─1057 /usr/sbin/cupsd -l
           │ ├─dbus-broker.service
           │ │ ├─ 990 /usr/bin/dbus-broker-launch --scope system --audit
           │ │ └─1004 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
           │ ├─fwupd.service
           │ │ └─2930 /usr/libexec/fwupd/fwupd
           │ ├─gdm.service
           │ │ └─1076 /usr/sbin/gdm
           │ ├─gssproxy.service
           │ │ └─1062 /usr/sbin/gssproxy -D
           │ ├─low-memory-monitor.service
           │ │ └─952 /usr/libexec/low-memory-monitor
           │ ├─packagekit.service
           │ │ └─8766 /usr/libexec/packagekitd
           │ ├─pcscd.service
           │ │ └─1536 /usr/sbin/pcscd --foreground --auto-exit
lines 1-56























































● ubuntu
    State: degraded
    Units: 532 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 1 units
    Since: Wed 2023-07-19 21:58:46 CEST; 40min left
  systemd: 253.5-1.fc38
  Tainted: local-hwclock
   CGroup: /
           ├─init.scope
           │ └─1 /usr/lib/systemd/systemd rhgb --switched-root --system --deserialize=35
           ├─system.slice
           │ ├─ModemManager.service
           │ │ └─1060 /usr/sbin/ModemManager
           │ ├─NetworkManager.service
           │ │ └─945 /usr/sbin/NetworkManager --no-daemon
           │ ├─abrt-journal-core.service
           │ │ └─1048 /usr/bin/abrt-dump-journal-core -D -T -f -e
           │ ├─abrt-oops.service
           │ │ └─1049 /usr/bin/abrt-dump-journal-oops -fxtD
           │ ├─abrt-xorg.service
           │ │ └─1052 /usr/bin/abrt-dump-journal-xorg -fxtD
           │ ├─abrtd.service
           │ │ └─981 /usr/sbin/abrtd -d -s
           │ ├─accounts-daemon.service
           │ │ └─957 /usr/libexec/accounts-daemon
           │ ├─alsa-state.service
           │ │ └─1053 /usr/sbin/alsactl -s -n 19 -c -E ALSA_CONFIG_PATH=/etc/alsa/alsactl.conf --initfile=/lib/alsa/init/00main rdaemon
           │ ├─auditd.service
           │ │ └─904 /sbin/auditd
           │ ├─avahi-daemon.service
           │ │ ├─946 "avahi-daemon: running [ubuntu.local]"
           │ │ └─982 "avahi-daemon: chroot helper"
           │ ├─bluetooth.service
           │ │ └─947 /usr/libexec/bluetooth/bluetoothd
           │ ├─chronyd.service
           │ │ └─972 /usr/sbin/chronyd -F 2
           │ ├─colord.service
           │ │ └─1409 /usr/libexec/colord
           │ ├─cups.service
           │ │ └─1057 /usr/sbin/cupsd -l
           │ ├─dbus-broker.service
           │ │ ├─ 990 /usr/bin/dbus-broker-launch --scope system --audit
           │ │ └─1004 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
           │ ├─fwupd.service
           │ │ └─2930 /usr/libexec/fwupd/fwupd
           │ ├─gdm.service
           │ │ └─1076 /usr/sbin/gdm
           │ ├─gssproxy.service
           │ │ └─1062 /usr/sbin/gssproxy -D
           │ ├─low-memory-monitor.service
           │ │ └─952 /usr/libexec/low-memory-monitor
           │ ├─packagekit.service
           │ │ └─8766 /usr/libexec/packagekitd
           │ ├─pcscd.service
           │ │ └─1536 /usr/sbin/pcscd --foreground --auto-exit
           │ ├─polkit.service
           │ │ └─953 /usr/lib/polkit-1/polkitd --no-debug
           │ ├─portmaster.service
           │ │ ├─ 954 /opt/safing/portmaster/portmaster-start --data /opt/safing/portmaster core --
           │ │ └─1081 /opt/safing/portmaster/updates/linux_amd64/core/portmaster-core_v1-1-0 --data /opt/safing/portmaster
           │ ├─power-profiles-daemon.service
           │ │ └─955 /usr/libexec/power-profiles-daemon
           │ ├─rtkit-daemon.service
           │ │ └─956 /usr/libexec/rtkit-daemon
           │ ├─sssd-kcm.service
           │ │ └─2392 /usr/libexec/sssd/sssd_kcm --uid 0 --gid 0 --logger=files
           │ ├─switcheroo-control.service
           │ │ └─958 /usr/libexec/switcheroo-control
           │ ├─system-dbus\x2d:1.18\x2dorg.freedesktop.problems.slice
           │ │ └─dbus-:1.18-org.freedesktop.problems@0.service
           │ │   └─2790 /usr/sbin/abrt-dbus -t133
           │ ├─systemd-journald.service
           │ │ └─685 /usr/lib/systemd/systemd-journald
           │ ├─systemd-logind.service
           │ │ └─959 /usr/lib/systemd/systemd-logind
           │ ├─systemd-machined.service
           │ │ └─963 /usr/lib/systemd/systemd-machined
           │ ├─systemd-oomd.service
           │ │ └─902 /usr/lib/systemd/systemd-oomd
           │ ├─systemd-resolved.service
           │ │ └─903 /usr/lib/systemd/systemd-resolved
           │ ├─systemd-udevd.service
           │ │ └─udev
           │ │   └─705 /usr/lib/systemd/systemd-udevd
           │ ├─systemd-userdbd.service
           │ │ ├─ 906 /usr/lib/systemd/systemd-userdbd
           │ │ ├─8342 "systemd-userwork: waiting..."
           │ │ ├─8343 "systemd-userwork: waiting..."
           │ │ └─8358 "systemd-userwork: waiting..."
           │ ├─udisks2.service
           │ │ └─966 /usr/libexec/udisks2/udisksd
           │ ├─upower.service
           │ │ └─970 /usr/libexec/upowerd
           │ ├─uresourced.service
           │ │ └─1138 /usr/libexec/uresourced
           │ └─wpa_supplicant.service
           │   └─1190 /usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -u -s
           └─user.slice
             ├─user-1000.slice
             │ ├─session-2.scope
             │ │ ├─1835 "gdm-session-worker [pam/gdm-password]"
             │ │ ├─1963 /usr/bin/gnome-keyring-daemon --daemonize --login
             │ │ ├─1981 /usr/libexec/gdm-wayland-session /usr/bin/gnome-session
             │ │ └─1996 /usr/libexec/gnome-session-binary
             │ └─user@1000.service
             │   ├─app.slice
             │   │ ├─app-gnome-brave\x2dbrowser-3133.scope
             │   │ │ └─3133 /bin/bash /usr/bin/brave-browser-stable
             │   │ ├─app-gnome-org.gnome.Evolution\x2dalarm\x2dnotify-2506.scope
             │   │ │ └─2506 /usr/libexec/evolution-data-server/evolution-alarm-notify
             │   │ ├─app-gnome-org.gnome.SettingsDaemon.DiskUtilityNotify-2494.scope
             │   │ │ └─2494 /usr/libexec/gsd-disk-utility-notify
             │   │ ├─app-gnome-org.gnome.Software-2527.scope
             │   │ │ └─2527 /usr/bin/gnome-software --gapplication-service
             │   │ ├─app-gnome\x2dsession\x2dmanager.slice
             │   │ │ └─gnome-session-manager@gnome.service
             │   │ │   └─2078 /usr/libexec/gnome-session-binary --systemd-service --session=gnome
             │   │ ├─app-org.gnome.Terminal.slice
             │   │ │ ├─gnome-terminal-server.service
             │   │ │ │ └─8700 /usr/libexec/gnome-terminal-server
             │   │ │ └─vte-spawn-aebaf119-1528-4379-a90f-43e427df8b97.scope
             │   │ │   ├─8723 bash
             │   │ │   ├─8780 systemctl status
             │   │ │   └─8781 less
             │   │ ├─dbus-:1.2-org.freedesktop.portal.IBus@0.service
             │   │ │ └─2648 /usr/libexec/ibus-portal
             │   │ ├─dbus-:1.2-org.freedesktop.problems.applet@0.service
             │   │ │ └─2650 /usr/bin/abrt-applet --gapplication-service
             │   │ ├─dbus-:1.2-org.gnome.Identity@0.service
             │   │ │ └─2370 /usr/libexec/goa-identity-service
             │   │ ├─dbus-:1.2-org.gnome.Nautilus@0.service
             │   │ │ └─8595 /usr/bin/nautilus --gapplication-service
             │   │ ├─dbus-:1.2-org.gnome.OnlineAccounts@0.service
             │   │ │ └─2348 /usr/libexec/goa-daemon
             │   │ ├─dbus-:1.2-org.gnome.ScreenSaver@0.service
             │   │ │ └─2660 /usr/bin/gjs /usr/share/gnome-shell/org.gnome.ScreenSaver
             │   │ ├─dbus-:1.2-org.gnome.Shell.CalendarServer@0.service
             │   │ │ └─2303 /usr/libexec/gnome-shell-calendar-server
             │   │ ├─dbus-:1.2-org.gnome.Shell.Notifications@0.service
             │   │ │ └─2403 /usr/bin/gjs /usr/share/gnome-shell/org.gnome.Shell.Notifications
             │   │ ├─dbus-:1.26-org.a11y.atspi.Registry@0.service
             │   │ │ └─2449 /usr/libexec/at-spi2-registryd --use-gnome-session
             │   │ ├─dconf.service
             │   │ │ └─2434 /usr/libexec/dconf-service
             │   │ ├─evolution-addressbook-factory.service
             │   │ │ └─2398 /usr/libexec/evolution-addressbook-factory
             │   │ ├─evolution-calendar-factory.service
             │   │ │ └─2361 /usr/libexec/evolution-calendar-factory
             │   │ ├─evolution-source-registry.service
             │   │ │ └─2310 /usr/libexec/evolution-source-registry
             │   │ ├─flatpak-portal.service
             │   │ │ └─7985 /usr/libexec/flatpak-portal
             │   │ ├─flatpak-session-helper.service
             │   │ │ ├─3663 /usr/libexec/flatpak-session-helper
             │   │ │ └─3668 server --sh -n /run/user/1000/.flatpak-helper/pkcs11-flatpak-3663 --provider p11-kit-trust.so "pkcs11:model=p11-kit-trust?write-protected=yes"
             │   │ ├─gnome-session-monitor.service
             │   │ │ └─2072 /usr/libexec/gnome-session-ctl --monitor
             │   │ ├─tracker-miner-fs-3.service
             │   │ │ └─2910 /usr/libexec/tracker-miner-fs-3
             │   │ ├─xdg-desktop-portal-gnome.service
             │   │ │ └─2852 /usr/libexec/xdg-desktop-portal-gnome
             │   │ └─xdg-desktop-portal-gtk.service
             │   │   └─2891 /usr/libexec/xdg-desktop-portal-gtk
             │   ├─init.scope
             │   │ ├─1925 /usr/lib/systemd/systemd --user
             │   │ └─1935 "(sd-pam)"
             │   ├─session.slice
             │   │ ├─at-spi-dbus-bus.service
             │   │ │ ├─2273 /usr/libexec/at-spi-bus-launcher
             │   │ │ ├─2279 /usr/bin/dbus-broker-launch --config-file=/usr/share/defaults/at-spi2/accessibility.conf --scope user
             │   │ │ └─2280 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 100000000000000 --max-fds 6400000 --max-matches 5000000000
             │   │ ├─dbus-broker.service
             │   │ │ ├─1987 /usr/bin/dbus-broker-launch --scope user
             │   │ │ └─1991 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
             │   │ ├─gvfs-daemon.service
             │   │ │ ├─2085 /usr/libexec/gvfsd
             │   │ │ └─2439 /usr/libexec/gvfsd-trash --spawner :1.7 /org/gtk/gvfs/exec_spaw/0
             │   │ ├─gvfs-goa-volume-monitor.service
             │   │ │ └─2384 /usr/libexec/gvfs-goa-volume-monitor
             │   │ ├─gvfs-gphoto2-volume-monitor.service
             │   │ │ └─2375 /usr/libexec/gvfs-gphoto2-volume-monitor
             │   │ ├─gvfs-metadata.service
             │   │ │ └─3736 /usr/libexec/gvfsd-metadata
             │   │ ├─gvfs-mtp-volume-monitor.service
             │   │ │ └─2354 /usr/libexec/gvfs-mtp-volume-monitor
             │   │ ├─gvfs-udisks2-volume-monitor.service
             │   │ │ └─2340 /usr/libexec/gvfs-udisks2-volume-monitor
             │   │ ├─org.freedesktop.IBus.session.GNOME.service
             │   │ │ ├─2464 /usr/bin/ibus-daemon --panel disable
             │   │ │ ├─2549 /usr/libexec/ibus-dconf
             │   │ │ ├─2550 /usr/libexec/ibus-extension-gtk3
             │   │ │ ├─2794 /usr/libexec/ibus-engine-simple
             │   │ │ └─3548 /usr/bin/python3 /usr/share/ibus-typing-booster/engine/main.py --ibus
             │   │ ├─org.gnome.SettingsDaemon.A11ySettings.service
             │   │ │ └─2466 /usr/libexec/gsd-a11y-settings
             │   │ ├─org.gnome.SettingsDaemon.Color.service
             │   │ │ └─2474 /usr/libexec/gsd-color
             │   │ ├─org.gnome.SettingsDaemon.Datetime.service
             │   │ │ └─2476 /usr/libexec/gsd-datetime
             │   │ ├─org.gnome.SettingsDaemon.Housekeeping.service
             │   │ │ └─2481 /usr/libexec/gsd-housekeeping
             │   │ ├─org.gnome.SettingsDaemon.Keyboard.service
             │   │ │ └─2482 /usr/libexec/gsd-keyboard
             │   │ ├─org.gnome.SettingsDaemon.MediaKeys.service
             │   │ │ └─2486 /usr/libexec/gsd-media-keys
             │   │ ├─org.gnome.SettingsDaemon.Power.service
             │   │ │ └─2492 /usr/libexec/gsd-power
             │   │ ├─org.gnome.SettingsDaemon.PrintNotifications.service
             │   │ │ ├─2495 /usr/libexec/gsd-print-notifications
             │   │ │ └─2759 /usr/libexec/gsd-printer
             │   │ ├─org.gnome.SettingsDaemon.Rfkill.service
             │   │ │ └─2500 /usr/libexec/gsd-rfkill
             │   │ ├─org.gnome.SettingsDaemon.ScreensaverProxy.service
             │   │ │ └─2505 /usr/libexec/gsd-screensaver-proxy
             │   │ ├─org.gnome.SettingsDaemon.Sharing.service
             │   │ │ └─2513 /usr/libexec/gsd-sharing
             │   │ ├─org.gnome.SettingsDaemon.Smartcard.service
             │   │ │ └─2522 /usr/libexec/gsd-smartcard
             │   │ ├─org.gnome.SettingsDaemon.Sound.service
             │   │ │ └─2532 /usr/libexec/gsd-sound
             │   │ ├─org.gnome.SettingsDaemon.UsbProtection.service
             │   │ │ └─2538 /usr/libexec/gsd-usb-protection
             │   │ ├─org.gnome.SettingsDaemon.Wacom.service
             │   │ │ └─2547 /usr/libexec/gsd-wacom
             │   │ ├─org.gnome.SettingsDaemon.XSettings.service
             │   │ │ ├─3176 /usr/libexec/gsd-xsettings
             │   │ │ └─3195 /usr/libexec/ibus-x11
             │   │ ├─org.gnome.Shell@wayland.service
             │   │ │ ├─2164 /usr/bin/gnome-shell
             │   │ │ ├─3138 cat
             │   │ │ ├─3139 cat
             │   │ │ ├─3140 /opt/brave.com/brave/brave
             │   │ │ ├─3142 /opt/brave.com/brave/chrome_crashpad_handler --monitor-self --monitor-self-annotation=ptype=crashpad-handler "--database=/home/potiron/.config/BraveSoftware/Brave-Browser/Crash Reports" --metrics-dir=/home/pot>
             │   │ │ ├─3144 /opt/brave.com/brave/chrome_crashpad_handler --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler "--database=/home/potiron/.config/BraveSoftware/Brave-Browser/Crash Reports" --url=https://cr.b>
             │   │ │ ├─3150 "/opt/brave.com/brave/brave --type=zygote --no-zygote-sandbox --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --change-stack-guard-on-fork=enable"
             │   │ │ ├─3151 "/opt/brave.com/brave/brave --type=zygote --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --change-stack-guard-on-fork=enable"
             │   │ │ ├─3153 "/opt/brave.com/brave/brave --type=zygote --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --change-stack-guard-on-fork=enable"
             │   │ │ ├─3164 /usr/bin/Xwayland :0 -rootless -noreset -accessx -core -auth /run/user/1000/.mutter-Xwaylandauth.LCL471 -listenfd 4 -listenfd 5 -displayfd 6 -initfd 7 -byteswappedclients
             │   │ │ ├─3206 /usr/libexec/mutter-x11-frames
             │   │ │ ├─3227 "/opt/brave.com/brave/brave --type=gpu-process --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --change-stack-guard-on-fork=enable --gpu-preferences=WAAAAAAAAAAgAAAEAA>
             │   │ │ ├─3228 "/opt/brave.com/brave/brave --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6>
             │   │ │ ├─3254 "/opt/brave.com/brave/brave --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=utility --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-2>
             │   │ │ ├─3273 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3274 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --extension-process --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1P>
             │   │ │ ├─3310 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3341 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --extension-process --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1P>
             │   │ │ ├─3427 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3428 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3434 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3440 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3488 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─3517 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─5488 "/opt/brave.com/brave/brave --type=utility --utility-sub-type=audio.mojom.AudioService --lang=fr --service-sandbox-type=none --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6>
             │   │ │ ├─5639 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─6033 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─6339 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─7085 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─7779 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ ├─8362 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ │ └─8382 "/opt/brave.com/brave/brave --type=renderer --crashpad-handler-pid=3142 --enable-crash-reporter=8627ec9c-6244-4c47-8c7f-26d6b4f6cce4, --origin-trial-public-key=bYUKPJoPnCxeNvu72j4EmPuK7tr1PAC7SHh8ld9Mw3E=,fMS4>
             │   │ ├─pipewire-pulse.service
             │   │ │ └─2325 /usr/bin/pipewire-pulse
             │   │ ├─pipewire.service
             │   │ │ └─2103 /usr/bin/pipewire
             │   │ ├─wireplumber.service
             │   │ │ └─2104 /usr/bin/wireplumber
             │   │ ├─xdg-desktop-portal.service
             │   │ │ └─2805 /usr/libexec/xdg-desktop-portal
             │   │ ├─xdg-document-portal.service
             │   │ │ ├─2812 /usr/libexec/xdg-document-portal
             │   │ │ └─2820 fusermount3 -o rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal -- /run/user/1000/doc
             │   │ └─xdg-permission-store.service
             │   │   └─2262 /usr/libexec/xdg-permission-store
             │   └─uresourced.service
             │     └─2074 /usr/libexec/uresourced --user
             └─user-42.slice
               ├─session-c1.scope
               │ └─1703 ibus-daemon --panel disable -r --xim
               └─user@42.service
                 ├─init.scope
                 │ ├─1145 /usr/lib/systemd/systemd --user
                 │ └─1147 "(sd-pam)"
                 └─session.slice
                   ├─dbus-broker.service
                   │ ├─1164 /usr/bin/dbus-broker-launch --scope user
                   │ └─1165 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
                   ├─pipewire-pulse.service
                   │ └─1372 /usr/bin/pipewire-pulse
                   ├─pipewire.service
                   │ └─1367 /usr/bin/pipewire
                   ├─wireplumber.service
                   │ └─1369 /usr/bin/wireplumber
                   └─xdg-permission-store.service
                     └─1823 /usr/libexec/xdg-permission-store
lines 242-295/295 (END)
4

That is a Ubuntu system and this is a fedora discussion forum.
Better to ask on a ubuntu forum.

You posted a picture and i asked for preformatted text…
Regardless the error is for Systemd sysctl is not systemd logind.

5

Im sorry i didn’t mention that im not on Ubuntu it’s just the name of my computer, im on Fedora, fo. Im new to linux and i apologize for explaining my problem wrong, i don’t understant it quit well. For the preformatted text, im sorry i through you were asking only for “state degraded”.

6

In the cog wheel menu there is a preformatted text entry.
Named your fedora system unbuntu, oh!

What does this show?

systemctl status systemd-sysctl
7

Taking on the task of hardening the kernel will require experience with kernels.
Do you have the background from another OS?

8

What do you mean by “the background of another OS”? Like if i have experiance doing this with an other OS?

9

If so, not really, i know a bit about kernel there and there and i did some reacherches on it before

1 Like
10 
× systemd-sysctl.service - Apply Kernel Variables
     Loaded: loaded (/usr/lib/systemd/system/systemd-sysctl.service; static)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Wed 2023-07-19 21:40:23 CEST; 11m>
   Duration: 3.768s
       Docs: man:systemd-sysctl.service(8)
             man:sysctl.d(5)
    Process: 882 ExecStart=/usr/lib/systemd/systemd-sysctl (code=exited, status>
   Main PID: 882 (code=exited, status=1/FAILURE)
        CPU: 12ms

juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'none' to 'vsyscal>
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'off' to 'debugfs'>
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'panic' to 'oops',>
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '1' to 'module/sig>
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'confidentiality' >
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '0' to 'mce', igno>
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '0' to 'quiet logl>
juil. 19 21:40:23 ubuntu systemd[1]: systemd-sysctl.service: Main process exite>
juil. 19 21:40:23 ubuntu systemd[1]: systemd-sysctl.service: Failed with result>
juil. 19 21:40:23 ubuntu systemd[1]: Failed to start systemd-sysctl.service - A>
lines 1-22/22 (END)...skipping...
× systemd-sysctl.service - Apply Kernel Variables
     Loaded: loaded (/usr/lib/systemd/system/systemd-sysctl.service; static)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Wed 2023-07-19 21:40:23 CEST; 11min ago
   Duration: 3.768s
       Docs: man:systemd-sysctl.service(8)
             man:sysctl.d(5)
    Process: 882 ExecStart=/usr/lib/systemd/systemd-sysctl (code=exited, status=1/FAILURE)
   Main PID: 882 (code=exited, status=1/FAILURE)
        CPU: 12ms

juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'none' to 'vsyscall', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'off' to 'debugfs', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'panic' to 'oops', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '1' to 'module/sig_enforce', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'confidentiality' to 'lockdown', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '0' to 'mce', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '0' to 'quiet loglevel', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd[1]: systemd-sysctl.service: Main process exited, code=exited, status=1/FAILURE
juil. 19 21:40:23 ubuntu systemd[1]: systemd-sysctl.service: Failed with result 'exit-code'.
juil. 19 21:40:23 ubuntu systemd[1]: Failed to start systemd-sysctl.service - Apply Kernel Variables.
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
lines 1-22/22 (END)























































× systemd-sysctl.service - Apply Kernel Variables
     Loaded: loaded (/usr/lib/systemd/system/systemd-sysctl.service; static)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Wed 2023-07-19 21:40:23 CEST; 11min ago
   Duration: 3.768s
       Docs: man:systemd-sysctl.service(8)
             man:sysctl.d(5)
    Process: 882 ExecStart=/usr/lib/systemd/systemd-sysctl (code=exited, status=1/FAILURE)
   Main PID: 882 (code=exited, status=1/FAILURE)
        CPU: 12ms

juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'none' to 'vsyscall', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'off' to 'debugfs', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'panic' to 'oops', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '1' to 'module/sig_enforce', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write 'confidentiality' to 'lockdown', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '0' to 'mce', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd-sysctl[882]: Couldn't write '0' to 'quiet loglevel', ignoring: No such file or directory
juil. 19 21:40:23 ubuntu systemd[1]: systemd-sysctl.service: Main process exited, code=exited, status=1/FAILURE
juil. 19 21:40:23 ubuntu systemd[1]: systemd-sysctl.service: Failed with result 'exit-code'.
juil. 19 21:40:23 ubuntu systemd[1]: Failed to start systemd-sysctl.service - Apply Kernel Variables.
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~`Preformatted text`
~
lines 1-22/22 (END)

This is what i see when i type systemctl status systemd-logind

11

Yes that is my question. If this is a new area of research for you you will have lots to learn about. It is an interesting topic.

12

Before one can even consider hardening a system beyond what is provided by the distro when initially installed one must understand what hardening even means, what level the system currently is at, and have some idea of what they feel is inadequate and should be enhanced.

The title is about systemctl-logind.service failure to start and hardening is many levels of expertise beyond logging in. Lets just stick with the current topic and not branch into security issues.

Fix what your changes broke then study before making other changes.

13

Why do you keep saying logind? That is not service you showed the output of or what is failing.

You will need to fix the damage you did that broke sysctl.
Review what that service does and its data files.

14

Sorry it’s a typo

15

I typed systemctl status systemd-sysctl as you told me to

16

By the way, here’s what i got when i typed systemctl --failed (with only ‘-’ it doesn’t work)


  UNIT                   LOAD   ACTIVE SUB    DESCRIPTION           
● systemd-sysctl.service loaded failed failed Apply Kernel Variables

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.
1 loaded units listed.
17

If you have not invested much in your fedora installation you may find its easier to reinstall it.

Also it is worry considering installing fedora in a VM to do your hardening experiments
Only make one small change at a time.
Make a record of exactly what you change so you can undo it.

1 Like
18

Yes that’s a good idea, but since you’re suggesting to reinstall fedora does it mean that the problem can’t be fixed(or it can’t but in a very complicated way) ?
I think i’ve seen too big, like you said, i shloud take time to do it

19 
● ubuntu
    State: degraded
    Units: 527 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 1 units
    Since: Wed 2023-07-19 23:40:21 CEST; 1h 40min left
  systemd: 253.5-1.fc38
  Tainted: local-hwclock
   CGroup: /
           ├─init.scope
           │ └─1 /usr/lib/systemd/systemd rhgb --switched-root --system --deser>
           ├─system.slice
           │ ├─ModemManager.service
           │ │ └─1061 /usr/sbin/ModemManager
           │ ├─NetworkManager.service
           │ │ └─942 /usr/sbin/NetworkManager --no-daemon
           │ ├─abrt-journal-core.service
           │ │ └─1046 /usr/bin/abrt-dump-journal-core -D -T -f -e
           │ ├─abrt-oops.service
           │ │ └─1048 /usr/bin/abrt-dump-journal-oops -fxtD
           │ ├─abrt-xorg.service
           │ │ └─1049 /usr/bin/abrt-dump-journal-xorg -fxtD
           │ ├─abrtd.service
lines 1-23...skipping...
● ubuntu
    State: degraded
    Units: 527 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 1 units
    Since: Wed 2023-07-19 23:40:21 CEST; 1h 40min left
  systemd: 253.5-1.fc38
  Tainted: local-hwclock
   CGroup: /
           ├─init.scope
           │ └─1 /usr/lib/systemd/systemd rhgb --switched-root --system --deserialize=35
           ├─system.slice
           │ ├─ModemManager.service
           │ │ └─1061 /usr/sbin/ModemManager
           │ ├─NetworkManager.service
           │ │ └─942 /usr/sbin/NetworkManager --no-daemon
           │ ├─abrt-journal-core.service
           │ │ └─1046 /usr/bin/abrt-dump-journal-core -D -T -f -e
           │ ├─abrt-oops.service
           │ │ └─1048 /usr/bin/abrt-dump-journal-oops -fxtD
           │ ├─abrt-xorg.service
           │ │ └─1049 /usr/bin/abrt-dump-journal-xorg -fxtD
           │ ├─abrtd.service
           │ │ └─989 /usr/sbin/abrtd -d -s
           │ ├─accounts-daemon.service
           │ │ └─957 /usr/libexec/accounts-daemon
           │ ├─alsa-state.service
           │ │ └─1051 /usr/sbin/alsactl -s -n 19 -c -E ALSA_CONFIG_PATH=/etc/alsa/alsactl.conf --initfile=/lib/alsa/init/00main rdaemon
           │ ├─auditd.service
           │ │ └─905 /sbin/auditd
           │ ├─avahi-daemon.service
           │ │ ├─946 "avahi-daemon: running [ubuntu.local]"
           │ │ └─995 "avahi-daemon: chroot helper"
           │ ├─bluetooth.service
           │ │ └─947 /usr/libexec/bluetooth/bluetoothd
           │ ├─bolt.service
           │ │ └─4581 /usr/libexec/boltd
           │ ├─chronyd.service
           │ │ └─966 /usr/sbin/chronyd -F 2
           │ ├─colord.service
           │ │ └─1420 /usr/libexec/colord
           │ ├─cups.service
           │ │ └─1056 /usr/sbin/cupsd -l
           │ ├─dbus-broker.service
           │ │ ├─1002 /usr/bin/dbus-broker-launch --scope system --audit
           │ │ └─1004 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
           │ ├─fwupd.service
           │ │ └─2897 /usr/libexec/fwupd/fwupd
           │ ├─gdm.service
           │ │ └─1098 /usr/sbin/gdm
           │ ├─gssproxy.service
           │ │ └─1063 /usr/sbin/gssproxy -D
           │ ├─low-memory-monitor.service
           │ │ └─952 /usr/libexec/low-memory-monitor
           │ ├─pcscd.service
           │ │ └─1554 /usr/sbin/pcscd --foreground --auto-exit
lines 1-56























































● ubuntu
    State: degraded
    Units: 527 loaded (incl. loaded aliases)
     Jobs: 0 queued
   Failed: 1 units
    Since: Wed 2023-07-19 23:40:21 CEST; 1h 40min left
  systemd: 253.5-1.fc38
  Tainted: local-hwclock
   CGroup: /
           ├─init.scope
           │ └─1 /usr/lib/systemd/systemd rhgb --switched-root --system --deserialize=35
           ├─system.slice
           │ ├─ModemManager.service
           │ │ └─1061 /usr/sbin/ModemManager
           │ ├─NetworkManager.service
           │ │ └─942 /usr/sbin/NetworkManager --no-daemon
           │ ├─abrt-journal-core.service
           │ │ └─1046 /usr/bin/abrt-dump-journal-core -D -T -f -e
           │ ├─abrt-oops.service
           │ │ └─1048 /usr/bin/abrt-dump-journal-oops -fxtD
           │ ├─abrt-xorg.service
           │ │ └─1049 /usr/bin/abrt-dump-journal-xorg -fxtD
           │ ├─abrtd.service
           │ │ └─989 /usr/sbin/abrtd -d -s
           │ ├─accounts-daemon.service
           │ │ └─957 /usr/libexec/accounts-daemon
           │ ├─alsa-state.service
           │ │ └─1051 /usr/sbin/alsactl -s -n 19 -c -E ALSA_CONFIG_PATH=/etc/alsa/alsactl.conf --initfile=/lib/alsa/init/00main rdaemon
           │ ├─auditd.service
           │ │ └─905 /sbin/auditd
           │ ├─avahi-daemon.service
           │ │ ├─946 "avahi-daemon: running [ubuntu.local]"
           │ │ └─995 "avahi-daemon: chroot helper"
           │ ├─bluetooth.service
           │ │ └─947 /usr/libexec/bluetooth/bluetoothd
           │ ├─bolt.service
           │ │ └─4581 /usr/libexec/boltd
           │ ├─chronyd.service
           │ │ └─966 /usr/sbin/chronyd -F 2
           │ ├─colord.service
           │ │ └─1420 /usr/libexec/colord
           │ ├─cups.service
           │ │ └─1056 /usr/sbin/cupsd -l
           │ ├─dbus-broker.service
           │ │ ├─1002 /usr/bin/dbus-broker-launch --scope system --audit
           │ │ └─1004 dbus-broker --log 4 --controller 9 --machine-id 2439b2d2c5bd498c862d9e0d02ac6b31 --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
           │ ├─fwupd.service
           │ │ └─2897 /usr/libexec/fwupd/fwupd
           │ ├─gdm.service
           │ │ └─1098 /usr/sbin/gdm
           │ ├─gssproxy.service
           │ │ └─1063 /usr/sbin/gssproxy -D
           │ ├─low-memory-monitor.service
           │ │ └─952 /usr/libexec/low-memory-monitor
lines 1-54

Here’s what i got also for the state

20

Its hard to say what you need the repair unless you have a full log of what you did.
And even then its easier to just reinstall and try again with smaller changes.

1 Like