man: adjust description of PrivateUsers= so it is in line with reality
When the option is not available unit will not even start so there is no security risk. Fixes #34983
This commit is contained in:
committed by
Yu Watanabe
parent
80797bbb91
commit
f1a0f311e6
@@ -2053,10 +2053,6 @@ BindReadOnlyPaths=/var/lib/systemd</programlisting>
|
||||
databases in the root directory and on the host is reduced, as the only users and groups who need to be matched
|
||||
are <literal>root</literal>, <literal>nobody</literal> and the unit's own user and group.</para>
|
||||
|
||||
<para>Note that the implementation of this setting might be impossible (for example if user namespaces are not
|
||||
available), and the unit should be written in a way that does not solely rely on this setting for
|
||||
security.</para>
|
||||
|
||||
<xi:include href="version-info.xml" xpointer="v232"/></listitem>
|
||||
</varlistentry>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user