diff options
| author | Lennart Poettering <lennart@poettering.net> | 2015-01-27 02:33:46 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-01-27 02:33:46 +0100 |
| commit | 7e26029ff36d6112bd8c3273327c97708f9ee61e (patch) | |
| tree | 38c198d09c71c44b1393d7b7128472315f56ef96 /TODO | |
| parent | c51cbfdcc7f38438553e4c2c60499f6aea7cc504 (diff) | |
timesyncd: set RLIMIT_NPROC to 2
This way timesyncd cannot be used to fork().
Note that it generally is not safe to use RLIMIT_NPROC, since it breaks
running the same daemon in multiple containers if they do not use user
namespacing. However, timesyncd is excepted from running in a container
anyway, hence it is safe in this case.
Diffstat (limited to 'TODO')
0 files changed, 0 insertions, 0 deletions