From f1a0f311e6b3960506081aa40e72dc32f715dd71 Mon Sep 17 00:00:00 2001 From: Michal Sekletar Date: Fri, 15 Nov 2024 23:08:37 +0100 Subject: [PATCH] man: adjust description of PrivateUsers= so it is in line with reality When the option is not available unit will not even start so there is no security risk. Fixes #34983 --- man/systemd.exec.xml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index b1fcfecd74..695049db97 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -2053,10 +2053,6 @@ BindReadOnlyPaths=/var/lib/systemd databases in the root directory and on the host is reduced, as the only users and groups who need to be matched are root, nobody and the unit's own user and group. - Note that the implementation of this setting might be impossible (for example if user namespaces are not - available), and the unit should be written in a way that does not solely rely on this setting for - security. -