diff options
| author | Lennart Poettering <lennart@poettering.net> | 2010-06-19 16:57:54 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2010-06-19 16:57:54 +0200 |
| commit | 4d0e5dbd52291ae49740adb006bfc2595b953ec5 (patch) | |
| tree | ee8b72d08b0945914b8aaf652222987cc33935e9 /src/mount.c | |
| parent | 399ab2b1ac07be5afa9708b3280d4e1a4cceb5b8 (diff) | |
service: require KillMode=control-group when PAM is enabled
Diffstat (limited to 'src/mount.c')
| -rw-r--r-- | src/mount.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/mount.c b/src/mount.c index e3984203ac..081e92c029 100644 --- a/src/mount.c +++ b/src/mount.c @@ -303,6 +303,11 @@ static int mount_verify(Mount *m) { return -EBADMSG; } + if (m->exec_context.pam_name && m->kill_mode != KILL_CONTROL_GROUP) { + log_error("%s has PAM enabled. Kill mode must be set to 'control-group'. Refusing.", m->meta.id); + return -EINVAL; + } + return 0; } |