summaryrefslogtreecommitdiffstats
path: root/docs
diff options
context:
space:
mode:
authorLuca Boccassi <bluca@debian.org>2023-01-15 19:54:16 +0100
committerLuca Boccassi <luca.boccassi@gmail.com>2023-01-18 18:59:43 +0100
commitf2af682cd6308f9b26035b83063e6aa8593e468c (patch)
treedaae756d5864fc7978122d242752087be2b1ca82 /docs
parentMerge pull request #25790 from joshua-zivkovic/JZ/plotjson-main (diff)
downloadsystemd-f2af682cd6308f9b26035b83063e6aa8593e468c.tar.xz
systemd-f2af682cd6308f9b26035b83063e6aa8593e468c.zip
man: note that cgroup-based sandboxing is not bypassed by '+'
DeviceAllow= and others are applied to the whole cgroup via bpf, so using '+' on an Exec line will not bypass them. Explain this in the manpage. Fixes https://github.com/systemd/systemd/issues/26035
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions