SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

units: set RestrictNamespaces=yes to networkd and resolved

Browse Source 
Closes #8949.
This commit is contained in:
Yu Watanabe
2018-05-10 22:50:31 -07:00
committed by Lennart Poettering
parent b6887d7ae4
commit 46657f637c
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
units/systemd-networkd.service.in
+1
View File
@@ -33,6 +33,7 @@ ProtectControlGroups=yes
ProtectKernelModules=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
SystemCallArchitectures=native
units/systemd-resolved.service.in
+1
View File
@@ -37,6 +37,7 @@ ProtectKernelTunables=yes
ProtectKernelModules=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
SystemCallFilter=~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap
SystemCallArchitectures=native