core: Add support for PrivateUsers=identity

This configures an indentity mapping similar to
systemd-nspawn --private-users=identity.
This commit is contained in:
Daan De Meyer
2024-09-09 18:31:01 +02:00
parent d8b4be38dd
commit fa693fdc7e
14 changed files with 191 additions and 48 deletions
+4 -5
View File
@@ -1894,7 +1894,7 @@ static int exec_context_serialize(const ExecContext *c, FILE *f) {
if (r < 0)
return r;
r = serialize_bool_elide(f, "exec-context-private-users", c->private_users);
r = serialize_item(f, "exec-context-private-users", private_users_to_string(c->private_users));
if (r < 0)
return r;
@@ -2778,10 +2778,9 @@ static int exec_context_deserialize(ExecContext *c, FILE *f) {
return r;
c->private_network = r;
} else if ((val = startswith(l, "exec-context-private-users="))) {
r = parse_boolean(val);
if (r < 0)
return r;
c->private_users = r;
c->private_users = private_users_from_string(val);
if (c->private_users < 0)
return -EINVAL;
} else if ((val = startswith(l, "exec-context-private-ipc="))) {
r = parse_boolean(val);
if (r < 0)