Merge pull request #4185 from endocode/djalal-sandbox-first-protection-v1

core:sandbox: Add new ProtectKernelTunables=, ProtectControlGroups=, ProtectSystem=strict and fixes
2016-09-28 04:50:30 +03:00
parent b8fafaf4a1 cdfbd1fb26
commit cc238590e4
45 changed files with 1560 additions and 479 deletions
@@ -3019,7 +3019,7 @@ static int outer_child(
                return r;

        if (arg_read_only) {
-                r = bind_remount_recursive(directory, true);
+                r = bind_remount_recursive(directory, true, NULL);
                if (r < 0)
                        return log_error_errno(r, "Failed to make tree read-only: %m");
        }