diff options
author | Lennart Poettering <lennart@poettering.net> | 2021-01-21 15:06:13 +0100 |
---|---|---|
committer | Luca Boccassi <luca.boccassi@gmail.com> | 2021-01-21 20:15:08 +0100 |
commit | 8dd294c5a9111d7c03043f20dd23371991fbd1fa (patch) | |
tree | c3edfdf48eb5de4c78870fce586d973ac1f95709 /src/portable/profile/trusted | |
parent | ci: point the Fossies badge to main (diff) | |
download | systemd-8dd294c5a9111d7c03043f20dd23371991fbd1fa.tar.xz systemd-8dd294c5a9111d7c03043f20dd23371991fbd1fa.zip |
portabled: add BindPaths=/run back into "trusted" policy
This partly reverts fe239c7d7d6227209234100f4e0a36dd952a5587, where I
accidentally dropped only line for /run that was unlike the others.
Oops.
@bluca, thanks for noticing:
https://github.com/systemd/systemd/pull/18329#pullrequestreview-573343549
Diffstat (limited to 'src/portable/profile/trusted')
-rw-r--r-- | src/portable/profile/trusted/service.conf | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/portable/profile/trusted/service.conf b/src/portable/profile/trusted/service.conf index cb859c4e27..9a6af70b93 100644 --- a/src/portable/profile/trusted/service.conf +++ b/src/portable/profile/trusted/service.conf @@ -2,5 +2,6 @@ [Service] MountAPIVFS=yes +BindPaths=/run BindReadOnlyPaths=/etc/machine-id BindReadOnlyPaths=/etc/resolv.conf |