diff options
| author | Christian Hesse <mail@eworm.de> | 2015-06-30 19:12:20 +0200 |
|---|---|---|
| committer | Christian Hesse <mail@eworm.de> | 2015-06-30 19:12:20 +0200 |
| commit | 5833143708733a3fc9e6935922bf11d7d27cb768 (patch) | |
| tree | 4e6ca121fbb1dbede857f262f2533e240541676a | |
| parent | 94f568316080a3c28f5c03bc8a39fc4281af0975 (diff) | |
man: ProtectHome= protects /root as well
| -rw-r--r-- | man/systemd.exec.xml | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 64877720bc..45a4422dc3 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -858,9 +858,10 @@ <listitem><para>Takes a boolean argument or <literal>read-only</literal>. If true, the directories - <filename>/home</filename> and <filename>/run/user</filename> + <filename>/home</filename>, <filename>/root</filename> and + <filename>/run/user</filename> are made inaccessible and empty for processes invoked by this - unit. If set to <literal>read-only</literal>, the two + unit. If set to <literal>read-only</literal>, the three directories are made read-only instead. It is recommended to enable this setting for all long-running services (in particular network-facing ones), to ensure they cannot get |