diff options
| author | Lennart Poettering <lennart@poettering.net> | 2014-07-04 03:10:09 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2014-07-04 03:24:42 +0200 |
| commit | fa229d09281d435153b4cfd138a2a62fa66d889b (patch) | |
| tree | f15b28718287883d2eb7f34785b43c9c6ea36c0a /TODO | |
| parent | e0c74691c41a204eba2fd5f39615049fc9ff1648 (diff) | |
units: conditionalize configfs and debugfs with CAP_SYS_RAWIO
We really don't want these in containers as they provide a too lowlevel
look on the system.
Conditionalize them with CAP_SYS_RAWIO since that's required to access
/proc/kcore, /dev/kmem and similar, which feel similar in style. Also,
npsawn containers lack that capability.
Diffstat (limited to 'TODO')
0 files changed, 0 insertions, 0 deletions