SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

man/systemd.exec: update documentation for PrivateBPF=

Browse Source 
Add a short description about what PrivateBPF=yes does
and how it can be useful.
This commit is contained in:
Matteo Croce
2025-07-10 01:57:14 +02:00
parent 6b099b8369
commit 7baf403430
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/systemd.exec.xml
+6 -2
View File
@@ -2559,8 +2559,12 @@ RestrictNamespaces=~cgroup net</programlisting>
<term><varname>PrivateBPF=</varname></term>
<listitem><para>Takes a boolean argument. If set, mount a private instance of the BPF filesystem
on <filename>/sys/fs/bpf/</filename>. Otherwise, if <varname>ProtectKernelTunables=</varname> is set,
the instance from the host is inherited but mounted read-only. Defaults to false.</para>
on <filename>/sys/fs/bpf/</filename>, effectively hiding the host bpffs which contains informations
about loaded programs and maps. Otherwise, if <varname>ProtectKernelTunables=</varname> is set, the
instance from the host is inherited but mounted read-only.</para>
<para>This can be used together with the BPF delegate feature to choose what BPF functions are
available to the unit's processes. Defaults to false.</para>
<xi:include href="version-info.xml" xpointer="v258"/></listitem>
</varlistentry>