core: do not set noexec on sysfs/procfs

It causes a regression in certain running environments (networkd under LXC),
so avoid enabling for now.

Fixes #18795

Suggested-by: Topi Miettinen <toiwoton@gmail.com>

diff --git a/src/core/namespace.c b/src/core/namespace.c
index f9a33e16bc930b8107b9b08cf873973ddaa2b3ec..829fa61738bd3c9a6c0a542ad0c548f9129ce2e2 100644 (file)
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -272,7 +272,7 @@ static bool mount_entry_read_only(const MountEntry *p) {
 static bool mount_entry_noexec(const MountEntry *p) {
         assert(p);
 
-        return p->noexec || IN_SET(p->mode, NOEXEC, INACCESSIBLE, SYSFS, PROCFS);
+        return p->noexec || IN_SET(p->mode, NOEXEC, INACCESSIBLE);
 }
 
 static bool mount_entry_exec(const MountEntry *p) {