diff options
| author | Lennart Poettering <lennart@poettering.net> | 2017-02-09 10:28:23 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2017-02-09 16:12:03 +0100 |
| commit | 3c19d0b46bb05aef5dcaa2ce83c31b15ee8ae11b (patch) | |
| tree | b2219c2de686c483c19b857993ed5a1c9edac879 /src | |
| parent | 7f396e5f66e91caf450890c34bc9e00b717aae86 (diff) | |
units: restrict namespace for a good number of our own services
Basically, we turn it on for most long-running services, with the
exception of machined (whose child processes need to join containers
here and there), and importd (which sandboxes tar in a CLONE_NEWNET
namespace). machined is left unrestricted, and importd is restricted to
use only "net"
Diffstat (limited to 'src')
0 files changed, 0 insertions, 0 deletions