From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 21 Mar 2019 12:31:09 +0000 (+0100)
Subject: nspawn: add a few missing flags from --help text
X-Git-Tag: v242-rc1~97^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F12059%2Fhead;p=thirdparty%2Fsystemd.git

nspawn: add a few missing flags from --help text
---

diff --git a/src/nspawn/nspawn.c b/src/nspawn/nspawn.c
index e05aed23e5f..0cb207528a3 100644
--- a/src/nspawn/nspawn.c
+++ b/src/nspawn/nspawn.c
@@ -310,6 +310,7 @@ static int help(void) {
                "     --capability=CAP       In addition to the default, retain specified\n"
                "                            capability\n"
                "     --drop-capability=CAP  Drop the specified capability from the default set\n"
+               "     --no-new-privileges    Set PR_SET_NO_NEW_PRIVS flag for container payload\n"
                "     --system-call-filter=LIST|~LIST\n"
                "                            Permit/prohibit specific system calls\n"
                "  -Z --selinux-context=SECLABEL\n"
@@ -322,7 +323,8 @@ static int help(void) {
                "     --rlimit=NAME=LIMIT    Set a resource limit for the payload\n"
                "     --oom-score-adjust=VALUE\n"
                "                            Adjust the OOM score value for the payload\n"
-               "     --cpu-affinity=CPUS    Adjust the CPU affinity of the container\n\n"
+               "     --cpu-affinity=CPUS    Adjust the CPU affinity of the container\n"
+               "     --personality=ARCH     Pick personality for this container\n\n"
                "%3$sIntegration:%4$s\n"
                "     --resolv-conf=MODE     Select mode of /etc/resolv.conf initialization\n"
                "     --timezone=MODE        Select mode of /etc/localtime initialization\n"