]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/shared/seccomp-util.h
core: ProtectHostname= feature
authorTopi Miettinen <toiwoton@gmail.com>
Fri, 8 Feb 2019 17:25:00 +0000 (19:25 +0200)
committerTopi Miettinen <toiwoton@gmail.com>
Wed, 20 Feb 2019 08:50:44 +0000 (10:50 +0200)
commitaecd5ac6218f6291186b530b89cf2e97333fffc0
treeb62af068d107195fbc6b67cca60d48f7236a2d36
parenta6fe3b48941cebcb64a691db162ef2b9148bbccb
core: ProtectHostname= feature

Let services use a private UTS namespace. In addition, a seccomp filter is
installed on set{host,domain}name and a ro bind mounts on
/proc/sys/kernel/{host,domain}name.
man/systemd.exec.xml
src/core/dbus-execute.c
src/core/execute.c
src/core/execute.h
src/core/load-fragment-gperf.gperf.m4
src/core/namespace.c
src/core/namespace.h
src/shared/bus-unit-util.c
src/shared/seccomp-util.c
src/shared/seccomp-util.h