X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;f=man%2Fsystemd.exec.xml;h=b8843f1ea0bb7e869de35d3db6347189f3596df1;hb=eb5149ba7462e0e27a349fcf9f8514440b06067c;hp=d39149bd0c005a8cb83202ecd9e63896dffcc29c;hpb=5bcffb4b549c0d115d8e40137ea885b7568ec6cb;p=thirdparty%2Fsystemd.git diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index d39149bd0c0..b8843f1ea0b 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -1129,6 +1129,17 @@ BindReadOnlyPaths=/var/lib/systemd security. + + ProtectHostname= + + Takes a boolean argument. When set, sets up a new UTS namespace for the executed + processes. In addition, changing hostname or domainname is prevented. Defaults to off. + + Note that the implementation of this setting might be impossible (for example if UTS namespaces are not + available), and the unit should be written in a way that does not solely rely on this setting for + security. + + ProtectKernelTunables=