nresourced: add user.userbd.* xattrs to nsresourced userdb socket
This commit is contained in:
+1
-1
@@ -1040,7 +1040,7 @@ units = [
|
||||
'conditions' : ['ENABLE_NSRESOURCED'],
|
||||
},
|
||||
{
|
||||
'file' : 'systemd-nsresourced.socket',
|
||||
'file' : 'systemd-nsresourced.socket.in',
|
||||
'conditions' : ['ENABLE_NSRESOURCED'],
|
||||
},
|
||||
{
|
||||
|
||||
@@ -22,6 +22,10 @@ FileDescriptorName=varlink
|
||||
SocketMode=0666
|
||||
XAttrEntryPoint=user.varlink=entrypoint
|
||||
XAttrListen=user.varlink=listen
|
||||
XAttrEntryPoint=user.userdb.uid={{DYNAMIC_UID_MIN}}-{{DYNAMIC_UID_MAX}},{{CONTAINER_UID_BASE_MIN}}-{{CONTAINER_UID_BASE_MAX+65535}}
|
||||
XAttrEntryPoint=user.userdb.gid={{DYNAMIC_UID_MIN}}-{{DYNAMIC_UID_MAX}},{{CONTAINER_UID_BASE_MIN}}-{{CONTAINER_UID_BASE_MAX+65535}}
|
||||
XAttrEntryPoint=user.userdb.username=ns-*
|
||||
XAttrEntryPoint=user.userdb.groupname=ns-*
|
||||
|
||||
[Install]
|
||||
WantedBy=sockets.target
|
||||
Reference in New Issue
Block a user