]> git.ipfire.org Git - thirdparty/systemd.git/commit
core: allow-list char-rtc with ProtectClock=yes only if needed
authorLuca Boccassi <bluca@debian.org>
Wed, 19 Oct 2022 23:37:08 +0000 (00:37 +0100)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Thu, 20 Oct 2022 11:11:10 +0000 (13:11 +0200)
commit63857bf4f7a5dd48a2b971d9bae2c06cc829b630
tree32520d2af100b8dec81215fe6c8147c212aa6e9e
parent3d218676fc791fff7f72545405b645ab522a41ff
core: allow-list char-rtc with ProtectClock=yes only if needed

Allow-listing a device implicitly blocks everything else, so this
has the opposite of the intended effect when PrivateDevices= is
not used.
Allow-list char-rtc only if there is a device policy set.

Fixes https://github.com/systemd/systemd/issues/18142
src/core/unit.c