]> git.ipfire.org Git - thirdparty/systemd.git/commit
units: enable MaxConnectionsPerSocket= for all our Accept=yes units
authorLennart Poettering <lennart@poettering.net>
Wed, 7 Feb 2024 12:19:54 +0000 (13:19 +0100)
committerLennart Poettering <lennart@poettering.net>
Mon, 12 Feb 2024 10:57:24 +0000 (11:57 +0100)
commit5d1e8cd3e057261c6db3fb3d7de39b7ca48efd3b
treea6c1e5d16526d9c41870680e4e12c852e6622918
parent48930a5ded1a35ccebe11a4c904f298be708ad07
units: enable MaxConnectionsPerSocket= for all our Accept=yes units

Let's make sure that user's cannot DoS services for other users so
easily, and enable MaxConnectionsPerSocket= by default for all of them.

Note that this is mostly paranoia for systemd-pcrextend.socket and
systemd-sysext.socket: the socket is only accessible to root anyway,
hence the accounting shouldn#t change anything. But this is just a
safety net, in preparation that we open up some functionality of these
services sooner or later.
units/systemd-coredump.socket
units/systemd-creds.socket
units/systemd-pcrextend.socket
units/systemd-sysext.socket