SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

seccomp: add clone syscall definitions for mips (#5880)

Browse Source 
Also updates the documentation and adds a mention of ppc64 support
which was enabled by #5325.

Tested on Debian mipsel and mips64el. The other 4 mips architectures
should have an identical user <-> kernel ABI to one of the 2 tested
systems.
This commit is contained in:
James Cowgill
2017-05-03 18:35:45 +02:00
committed by Martin Pitt
parent 8251ee109c
commit a3645cc6dd
3 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/systemd.exec.xml
+2 -1
View File
@@ -1597,7 +1597,8 @@
the specified flags parameters into account. Note that — if this option is used — in addition to restricting
creation and switching of the specified types of namespaces (or all of them, if true) access to the
<function>setns()</function> system call with a zero flags parameter is prohibited. This setting is only
supported on x86, x86-64, s390 and s390x, and enforces no restrictions on other architectures. If running in user
supported on x86, x86-64, mips, mips-le, mips64, mips64-le, mips64-n32, mips64-le-n32, ppc64, ppc64-le,
s390 and s390x, and enforces no restrictions on other architectures. If running in user
mode, or in system mode, but without the <constant>CAP_SYS_ADMIN</constant> capability (e.g. setting
<varname>User=</varname>), <varname>NoNewPrivileges=yes</varname> is implied. </para></listitem>
</varlistentry>