diff options
| author | Yu Watanabe <watanabe.yu+github@gmail.com> | 2017-12-04 07:25:08 +0100 |
|---|---|---|
| committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2017-12-05 15:30:47 +0100 |
| commit | bf2d3d7cae71c7e8f30b7e8b63778c1880c5fdba (patch) | |
| tree | 0aa47fe5e5b0d77559bfa2e9a65be4fcb7647217 /man/systemd.exec.xml | |
| parent | man: include standard-options.xml in systemd-hwdb(8) (diff) | |
| download | systemd-bf2d3d7cae71c7e8f30b7e8b63778c1880c5fdba.tar.xz systemd-bf2d3d7cae71c7e8f30b7e8b63778c1880c5fdba.zip | |
man: fix typo
Diffstat (limited to 'man/systemd.exec.xml')
| -rw-r--r-- | man/systemd.exec.xml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 019bc3bae5..849baec974 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -1053,7 +1053,7 @@ CapabilityBoundingSet=~CAP_B CAP_C</programlisting> <listitem><para>Takes a boolean argument. If true, explicit module loading will be denied. This allows to turn off module load and unload operations on modular kernels. It is recommended to turn this on for most services - that do not need special file systems or extra kernel modules to work. Default to off. Enabling this option + that do not need special file systems or extra kernel modules to work. Defaults to off. Enabling this option removes <constant>CAP_SYS_MODULE</constant> from the capability bounding set for the unit, and installs a system call filter to block module system calls, also <filename>/usr/lib/modules</filename> is made inaccessible. For this setting the same restrictions regarding mount propagation and privileges apply as for |