core: add RestrictFileSystems= fragment parser
It takes an allow or deny list of filesystems services should have access to.
This commit is contained in:
committed by
Iago Lopez Galeiras
parent
b1994387d3
commit
e59ccd035c
@@ -144,6 +144,7 @@ ReadWritePaths=
|
||||
RemoveIPC=
|
||||
RestartKillSignal=
|
||||
RestrictAddressFamilies=
|
||||
RestrictFileSystems=
|
||||
RestrictNamespaces=
|
||||
RestrictNetworkInterfaces=
|
||||
RestrictRealtime=
|
||||
|
||||
@@ -275,6 +275,7 @@ RestartKillSignal=
|
||||
RestartPreventExitStatus=
|
||||
RestartSec=
|
||||
RestrictAddressFamilies=
|
||||
RestrictFileSystems=
|
||||
RestrictNamespaces=
|
||||
RestrictNetworkInterfaces=
|
||||
RestrictRealtime=
|
||||
|
||||
@@ -180,6 +180,7 @@ RemoveIPC=
|
||||
RemoveOnStop=
|
||||
RestartKillSignal=
|
||||
RestrictAddressFamilies=
|
||||
RestrictFileSystems=
|
||||
RestrictNamespaces=
|
||||
RestrictNetworkInterfaces=
|
||||
RestrictRealtime=
|
||||
|
||||
@@ -141,6 +141,7 @@ ReadWritePaths=
|
||||
RemoveIPC=
|
||||
RestartKillSignal=
|
||||
RestrictAddressFamilies=
|
||||
RestrictFileSystems=
|
||||
RestrictNamespaces=
|
||||
RestrictNetworkInterfaces=
|
||||
RestrictRealtime=
|
||||
|
||||
Reference in New Issue
Block a user