]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
nspawn: add a few missing flags from --help text 12059/head
authorLennart Poettering <lennart@poettering.net>
Thu, 21 Mar 2019 12:31:09 +0000 (13:31 +0100)
committerLennart Poettering <lennart@poettering.net>
Thu, 21 Mar 2019 12:31:09 +0000 (13:31 +0100)
src/nspawn/nspawn.c

index e05aed23e5f54cec177e2dafccbf409f4ef33939..0cb207528a3c93f9dce90f613ee85afee1c1ed0f 100644 (file)
@@ -310,6 +310,7 @@ static int help(void) {
                "     --capability=CAP       In addition to the default, retain specified\n"
                "                            capability\n"
                "     --drop-capability=CAP  Drop the specified capability from the default set\n"
+               "     --no-new-privileges    Set PR_SET_NO_NEW_PRIVS flag for container payload\n"
                "     --system-call-filter=LIST|~LIST\n"
                "                            Permit/prohibit specific system calls\n"
                "  -Z --selinux-context=SECLABEL\n"
@@ -322,7 +323,8 @@ static int help(void) {
                "     --rlimit=NAME=LIMIT    Set a resource limit for the payload\n"
                "     --oom-score-adjust=VALUE\n"
                "                            Adjust the OOM score value for the payload\n"
-               "     --cpu-affinity=CPUS    Adjust the CPU affinity of the container\n\n"
+               "     --cpu-affinity=CPUS    Adjust the CPU affinity of the container\n"
+               "     --personality=ARCH     Pick personality for this container\n\n"
                "%3$sIntegration:%4$s\n"
                "     --resolv-conf=MODE     Select mode of /etc/resolv.conf initialization\n"
                "     --timezone=MODE        Select mode of /etc/localtime initialization\n"