]> git.ipfire.org Git - thirdparty/systemd.git/commit
core: Add ProtectHostname=private 35447/head
authorRyan Wilson <ryantimwilson@meta.com>
Mon, 2 Dec 2024 16:10:05 +0000 (08:10 -0800)
committerRyan Wilson <ryantimwilson@meta.com>
Fri, 6 Dec 2024 21:34:04 +0000 (13:34 -0800)
commitcf48bde7aea52b18ac3fa218d3f60fd3d533ef66
tree7479fa8984a86fd9d519445d54ff6b174274c82d
parent6746f288548a240148c7c9643e14996bfe960017
core: Add ProtectHostname=private

This allows an option for systemd exec units to enable UTS namespaces
but not restrict changing hostname via seccomp. Thus, units can change
hostname without affecting the host.

Fixes: #30348
man/systemd.exec.xml
mkosi.conf
src/core/exec-invoke.c
src/core/namespace.c
src/core/namespace.h
test/units/TEST-07-PID1.protect-hostname.sh [new file with mode: 0755]