From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 22 Apr 2024 11:06:48 +0000 (+0200)
Subject: man: be explicit that we don't proxy SO_PEER*, SCM_RIGHTS and co.
X-Git-Tag: v256-rc1~71^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ef9262d0d178dd72488559ad88f2ce8980e5e6d7;p=thirdparty%2Fsystemd.git

man: be explicit that we don't proxy SO_PEER*, SCM_RIGHTS and co.

Fixes: #22744
---

diff --git a/man/systemd-socket-proxyd.xml b/man/systemd-socket-proxyd.xml
index 829cc958051..dde6d888ada 100644
--- a/man/systemd-socket-proxyd.xml
+++ b/man/systemd-socket-proxyd.xml
@@ -53,6 +53,11 @@
     <literal>Accept=no</literal> and an event-driven
     design that scales better with the number of
     connections.</para>
+
+    <para>Note that <command>systemd-socket-proxyd</command> will not forward socket side channel
+    information, i.e. will not forward <constant>SCM_RIGHTS</constant>, <constant>SCM_CREDENTIALS</constant>,
+    <constant>SCM_SECURITY</constant>, <constant>SO_PEERCRED</constant>, <constant>SO_PEERPIDFD</constant>,
+    <constant>SO_PEERSEC</constant>, <constant>SO_PEERGROUPS</constant> and similar.</para>
   </refsect1>
   <refsect1>
     <title>Options</title>