]> git.ipfire.org Git - thirdparty/systemd.git/commit - man/systemd.exec.xml
seccomp: add new @setuid seccomp group
authorLennart Poettering <lennart@poettering.net>
Wed, 9 Aug 2017 13:04:05 +0000 (15:04 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 10 Aug 2017 13:02:50 +0000 (15:02 +0200)
commit6eaaeee93a07eaa3108f99cd71d06af1adb68786
tree473a13303ac09fa4d1afb783278de46dc23b66b2
parent8f2c2f20b6383d7528ad86a26780b36f2a02e2d3
seccomp: add new @setuid seccomp group

This new group lists all UID/GID credential changing syscalls (which are
quite a number these days). This will become particularly useful in a
later commit, which uses this group to optionally permit user credential
changing to daemons in case ambient capabilities are not available.
man/systemd.exec.xml
src/shared/seccomp-util.c
src/shared/seccomp-util.h