diff options
| author | Alban Crequy <alban@endocode.com> | 2015-05-18 12:20:28 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-05-18 18:47:45 +0200 |
| commit | ee818b89f4890b3a00e93772249fce810f60811e (patch) | |
| tree | 0bda24d838ca13d87f40eba0dc3f582731bf9396 /sysctl.d/Makefile | |
| parent | a363680faa063dbcb624a6dfc4798cff0a4ba9d5 (diff) | |
core: Private*/Protect* options with RootDirectory
When a service is chrooted with the option RootDirectory=/opt/..., then
the options PrivateDevices, PrivateTmp, ProtectHome, ProtectSystem must
mount the directories under $RootDirectory/{dev,tmp,home,usr,boot}.
The test-ns tool can test setup_namespace() with and without chroot:
$ sudo TEST_NS_PROJECTS=/home/lennart/projects ./test-ns
$ sudo TEST_NS_CHROOT=/home/alban/debian-tree TEST_NS_PROJECTS=/home/alban/debian-tree/home/alban/Documents ./test-ns
Diffstat (limited to 'sysctl.d/Makefile')
0 files changed, 0 insertions, 0 deletions