diff options
| author | Lennart Poettering <lennart@poettering.net> | 2017-02-09 18:27:02 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2017-02-09 18:42:17 +0100 |
| commit | 0b8fab97cfb58aa5dd948915f1b897eeba86e7ae (patch) | |
| tree | e5892d1e31c0c98ec5cad2d7762bd2a1c9f86ef9 /src/basic | |
| parent | 1d450bda706abedb6724cc2c0f834ebc1686309f (diff) | |
man: improve documentation on seccomp regarding alternative ABIs
Let's clarify that RestrictAddressFamilies= and MemoryDenyWriteExecute=
are only fully effective if non-native system call architectures are
disabled, since they otherwise may be used to circumvent the filters, as
the filters aren't equally effective on all ABIs.
Fixes: #5277
Diffstat (limited to 'src/basic')
0 files changed, 0 insertions, 0 deletions