Compare commits

...

2 Commits

Author SHA1 Message Date
Michal Sekletar ee2f2b4572
Merge 50a367eb1e into d5bb359429 2024-11-19 15:14:11 +01:00
Michal Sekletar 50a367eb1e man: adjust description of PrivateUsers= so it is in line with reality
When the option is not available unit will not even start so there is
no security risk.

Fixes #34983
2024-11-15 23:11:09 +01:00
1 changed files with 0 additions and 4 deletions

View File

@ -2045,10 +2045,6 @@ BindReadOnlyPaths=/var/lib/systemd</programlisting>
databases in the root directory and on the host is reduced, as the only users and groups who need to be matched databases in the root directory and on the host is reduced, as the only users and groups who need to be matched
are <literal>root</literal>, <literal>nobody</literal> and the unit's own user and group.</para> are <literal>root</literal>, <literal>nobody</literal> and the unit's own user and group.</para>
<para>Note that the implementation of this setting might be impossible (for example if user namespaces are not
available), and the unit should be written in a way that does not solely rely on this setting for
security.</para>
<xi:include href="version-info.xml" xpointer="v232"/></listitem> <xi:include href="version-info.xml" xpointer="v232"/></listitem>
</varlistentry> </varlistentry>