]> git.ipfire.org Git - thirdparty/systemd.git/commit - man/systemd.exec.xml
core: add support to specify errno in SystemCallFilter=
authorYu Watanabe <watanabe.yu+github@gmail.com>
Sat, 11 Nov 2017 12:35:49 +0000 (21:35 +0900)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Sat, 11 Nov 2017 12:54:12 +0000 (21:54 +0900)
commit8cfa775f4f116c5f56a140da268ea7b6072534e6
tree7f88d52404e713e03c872c49a7c908fbbec479b3
parent473d2ec39cc9f43c7918c4587c8984ec9235455f
core: add support to specify errno in SystemCallFilter=

This makes each system call in SystemCallFilter= blacklist optionally
takes errno name or number after a colon. The errno takes precedence
over the one given by SystemCallErrorNumber=.

C.f. #7173.
Closes #7169.
man/systemd.exec.xml
src/core/dbus-execute.c
src/core/execute.c
src/core/execute.h
src/core/load-fragment.c
src/shared/seccomp-util.c
src/shared/seccomp-util.h