core: add RestrictFileSystems= fragment parser

It takes an allow or deny list of filesystems services should have
access to.
This commit is contained in:
Iago López Galeiras
2021-10-06 10:52:14 +02:00
committed by Iago Lopez Galeiras
parent b1994387d3
commit e59ccd035c
10 changed files with 145 additions and 1 deletions
+1 -1
View File
@@ -1023,7 +1023,7 @@ static int print_property(const char *name, const char *expected_value, sd_bus_m
return 1;
} else if (STR_IN_SET(name, "SystemCallFilter", "SystemCallLog", "RestrictAddressFamilies", "RestrictNetworkInterfaces")) {
} else if (STR_IN_SET(name, "SystemCallFilter", "SystemCallLog", "RestrictAddressFamilies", "RestrictNetworkInterfaces", "RestrictFileSystems")) {
_cleanup_strv_free_ char **l = NULL;
int allow_list;