]> git.ipfire.org Git - thirdparty/systemd.git/commit
Revert "Revert "Mount all fs nosuid when NoNewPrivileges=yes""
authorYu Watanabe <watanabe.yu+github@gmail.com>
Fri, 25 Jun 2021 06:16:34 +0000 (15:16 +0900)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Fri, 25 Jun 2021 06:16:34 +0000 (15:16 +0900)
commit6720e356c137d5e1b744e498858ed6f667bf5af2
treebe84099c4a78f8050cd6b10838fbc109e709e567
parentde61a04b188f81a85cdb5c64ddb4987dcd9d30d3
Revert "Revert "Mount all fs nosuid when NoNewPrivileges=yes""

This reverts commit 1753d3021564671fba3d3196a84da657d15fb632.

Let's re-enable that feature now. As reported when the original commit
was merged, this causes some trouble on SELinux enabled systems. So,
in the subsequent commit, the feature will be disabled when SELinux is enabled.
But, anyway, this commit just re-enable that feature unconditionally.
man/systemd.exec.xml
src/core/execute.c
src/core/namespace.c
src/core/namespace.h