git.ipfire.org Git - thirdparty/systemd.git/commit

]> git.ipfire.org Git - thirdparty/systemd.git/commit

projects / thirdparty / systemd.git / commit

author	Topi Miettinen <topimiettinen@users.noreply.github.com>
	Thu, 9 Jun 2016 07:32:04 +0000 (07:32 +0000)
committer	Lennart Poettering <lennart@poettering.net>
	Thu, 9 Jun 2016 07:32:04 +0000 (09:32 +0200)
commit	40093ce5dd4446c011377de6ec74d12a5b8a95b9
tree	e1980f5efa72cbe55478406b19e67f4054ce323a	tree \| snapshot
parent	d9c11f2b01463e33a0b453e013786b5b79182dbe	commit \| diff

units: add a basic SystemCallFilter (#3471)

Add a line
SystemCallFilter=~@clock @module @mount @obsolete @raw-io ptrace
for daemons shipped by systemd. As an exception, systemd-timesyncd
needs @clock system calls and systemd-localed is not privileged.
ptrace(2) is blocked to prevent seccomp escapes.

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom

units/systemd-hostnamed.service.in		diff \| blob \| blame \| history
units/systemd-importd.service.in		diff \| blob \| blame \| history
units/systemd-journald.service.in		diff \| blob \| blame \| history
units/systemd-localed.service.in		diff \| blob \| blame \| history
units/systemd-logind.service.in		diff \| blob \| blame \| history
units/systemd-machined.service.in		diff \| blob \| blame \| history
units/systemd-networkd.service.m4.in		diff \| blob \| blame \| history
units/systemd-resolved.service.m4.in		diff \| blob \| blame \| history
units/systemd-timedated.service.in		diff \| blob \| blame \| history
units/systemd-timesyncd.service.in		diff \| blob \| blame \| history