From: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Date: Sun, 19 Nov 2017 10:58:45 +0000 (+0100)
Subject: man: add link to kernel docs about no_new_privs
X-Git-Tag: v236~184^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a6fabe384d8b2fc880c3649b4c0e7bda357fb91b;p=thirdparty%2Fsystemd.git

man: add link to kernel docs about no_new_privs
---

diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml
index d043555860a..0aa0552f067 100644
--- a/man/systemd.exec.xml
+++ b/man/systemd.exec.xml
@@ -1448,7 +1448,11 @@ CapabilityBoundingSet=~CAP_B CAP_C</programlisting>
         <varname>RestrictAddressFamilies=</varname>, <varname>RestrictNamespaces=</varname>,
         <varname>PrivateDevices=</varname>, <varname>ProtectKernelTunables=</varname>,
         <varname>ProtectKernelModules=</varname>, <varname>MemoryDenyWriteExecute=</varname>, or
-        <varname>RestrictRealtime=</varname> are specified.</para></listitem>
+        <varname>RestrictRealtime=</varname> are specified.</para>
+
+        <para>Also see
+        <ulink url="https://www.kernel.org/doc/html/latest/userspace-api/no_new_privs.html">No New Privileges Flag</ulink>.
+        </para></listitem>
       </varlistentry>
 
       <varlistentry>