Merge pull request #3884 from poettering/private-users

diff --cc TODO
Simple merge

diff --cc man/systemd.exec.xml
Simple merge

diff --cc src/core/dbus-execute.c
Simple merge

diff --cc src/core/execute.c
index 7aafb1b058068d2bb59731962268ac0c1d5b43b9,cec3b3cf40bfd268074c68a97f3134bbbefec3db..6019df7ea695a0307c003e62a28fef6baafe7c5d
--- 1/src/core/execute.c
--- 2/src/core/execute.c
+++ b/src/core/execute.c
@@@ -2079,6 -2191,14 +2233,14 @@@ static int exec_child
          }
  #endif
  
 -        if (params->apply_permissions && context->private_users) {
++        if ((params->flags & EXEC_APPLY_PERMISSIONS) && context->private_users) {
+                 r = setup_private_users(uid, gid);
+                 if (r < 0) {
+                         *exit_status = EXIT_USER;
+                         return r;
+                 }
+         }
+ 
          /* We repeat the fd closing here, to make sure that
           * nothing is leaked from the PAM modules. Note that
           * we are more aggressive this time since socket_fd

diff --cc src/core/execute.h
Simple merge

diff --cc src/shared/bus-unit-util.c
Simple merge