SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
62,812 Commits 2 Branches 1 Tag
b65a4aec052dcebdc70fa3f958fc71e49cf30ed2
Commit Graph
1 Commits
Author SHA1 Message Date
Luca Boccassi f2af682cd6 man: note that cgroup-based sandboxing is not bypassed by '+' 
DeviceAllow= and others are applied to the whole cgroup via bpf, so
using '+' on an Exec line will not bypass them. Explain this in the
manpage.

Fixes https://github.com/systemd/systemd/issues/26035
 2023-01-18 17:59:43 +00:00