exec: introduce PrivateDevices= switch to provide services with a private /dev

Similar to PrivateNetwork=, PrivateTmp= introduce PrivateDevices= that sets up a private /dev with only the API pseudo-devices like /dev/null, /dev/zero, /dev/random, but not any physical devices in them.
2014-01-20 21:28:37 +01:00
parent 3540c7f88f
commit 7f112f50fe
13 changed files with 140 additions and 38 deletions
@@ -149,6 +149,7 @@ struct ExecContext {
        bool non_blocking;
        bool private_tmp;
        bool private_network;
+        bool private_devices;

        bool no_new_privileges;