git.ipfire.org Git - thirdparty/systemd.git/commit

]> git.ipfire.org Git - thirdparty/systemd.git/commit

projects / thirdparty / systemd.git / commit

author	Lennart Poettering <lennart@poettering.net>
	Thu, 24 May 2012 02:00:56 +0000 (04:00 +0200)
committer	Lennart Poettering <lennart@poettering.net>
	Thu, 24 May 2012 02:00:56 +0000 (04:00 +0200)
commit	ec8927ca5940e809f0b72f530582c76f1db4f065
tree	b230d2458088a82b879afc39a2752d5fc674974e	tree \| snapshot
parent	e056b01d8acea7fc06d52ef91d227d744faf5259	commit \| diff

main: add configuration option to alter capability bounding set for PID 1

This also ensures that caps dropped from the bounding set are also
dropped from the inheritable set, to be extra-secure. Usually that should
change very little though as the inheritable set is empty for all our uses
anyway.

12 files changed:

TODO		diff \| blob \| blame \| history
man/systemd.conf.xml		diff \| blob \| blame \| history
man/systemd.exec.xml		diff \| blob \| blame \| history
src/core/execute.c		diff \| blob \| blame \| history
src/core/load-fragment-gperf.gperf.m4		diff \| blob \| blame \| history
src/core/load-fragment.c		diff \| blob \| blame \| history
src/core/load-fragment.h		diff \| blob \| blame \| history
src/core/main.c		diff \| blob \| blame \| history
src/core/system.conf		diff \| blob \| blame \| history
src/nspawn/nspawn.c		diff \| blob \| blame \| history
src/shared/capability.c		diff \| blob \| blame \| history
src/shared/capability.h		diff \| blob \| blame \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom