core: Add ProtectKernelLogs
authorKevin Kuehler <keur@xcf.berkeley.edu>
Tue, 5 Nov 2019 01:18:42 +0000 (17:18 -0800)
committerKevin Kuehler <keur@xcf.berkeley.edu>
Mon, 11 Nov 2019 20:12:02 +0000 (12:12 -0800)
commit84703040186de5b4b90f5c41fe4db7f7a5ada05e
tree35107af554e98376f30ab01b4d1667963e007df5
parent620dbdd2489515696d53b90c061208b43b65aafa
core: Add ProtectKernelLogs

If seccomp is enabled, load the SYSCALL_FILTER_SET_SYSLOG into the
seccomp filter set. Drop the CAP_SYSLOG capability.
src/core/dbus-execute.c
src/core/execute.c
src/core/execute.h
src/core/load-fragment-gperf.gperf.m4
src/core/unit.c