SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

unit: turn off mount propagation for udevd

Browse Source 
Keep mounts done by udev rules private to udevd. Also, document how
MountFlags= may be used for this.
This commit is contained in:
Lennart Poettering
2014-03-20 04:16:39 +01:00
parent b5640d8245
commit c2c13f2df4
4 changed files with 65 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/systemd.exec.xml
+36 -6
View File
@@ -962,13 +962,43 @@
<option>shared</option>,
<option>slave</option> or
<option>private</option>, which
control whether the file system
namespace set up for this unit's
processes will receive or propagate
new mounts. See
control whether mounts in the file
system namespace set up for this
unit's processes will receive or
propagate mounts or unmounts. See
<citerefentry><refentrytitle>mount</refentrytitle><manvolnum>2</manvolnum></citerefentry>
for details. Default to
<option>shared</option>.</para></listitem>
for details. Defaults to
<option>shared</option>. Use
<option>shared</option> to ensure that
mounts and unmounts are propagated
from the host to the container and
vice versa. Use <option>slave</option>
to run processes so that none of their
mounts and unmounts will propagate to
the host. Use <option>private</option>
to also ensure that no mounts and
unmounts from the host will propagate
into the unit processes'
namespace. Note that
<option>slave</option> means that file
systems mounted on the host might stay
mounted continously in the unit's
namespace, and thus keep the device
busy. Note that the file system
namespace related options
(<varname>PrivateTmp=</varname>,
<varname>PrivateDevices=</varname>,
<varname>ReadOnlyDirectories=</varname>,
<varname>InaccessibleDirectories=</varname>
and
<varname>ReadWriteDirectories=</varname>)
require that mount and unmount
propagation from the unit's file
system namespace is disabled, and
hence downgrade
<option>shared</option> to
<option>slave</option>.
</para></listitem>
</varlistentry>
<varlistentry>