git-history.diyao.me Git - systemd/.git/commit

author	Lennart Poettering <lennart@poettering.net>
	Wed, 20 Mar 2019 19:19:38 +0000 (20:19 +0100)
committer	Lennart Poettering <lennart@poettering.net>
	Tue, 2 Apr 2019 14:56:48 +0000 (16:56 +0200)
commit	bf65b7e0c9fc215897b676ab9a7c9d1c688143ba
tree	906348e2120baa73531e774cf98eb1c5bbbc0c62	tree \| snapshot
parent	62aa29247c3d74bcec0607c347f2be23cd90675d	commit \| diff

core: imply NNP and SUID/SGID restriction for DynamicUser=yes service

Let's be safe, rather than sorry. This way DynamicUser=yes services can
neither take benefit of, nor create SUID/SGID binaries.

Given that DynamicUser= is a recent addition only we should be able to
get away with turning this on, even though this is strictly speaking a
binary compatibility breakage.

https://github.com/systemd/systemd.git

RSS Atom

NEWS		diff \| blob \| history
man/systemd.exec.xml		diff \| blob \| history
src/core/unit.c		diff \| blob \| history
units/systemd-journal-gatewayd.service.in		diff \| blob \| history
units/systemd-journal-upload.service.in		diff \| blob \| history