diff options
| -rw-r--r-- | Makefile.am | 1 | ||||
| -rw-r--r-- | units/systemd-nspawn@.service.in | 6 |
2 files changed, 4 insertions, 3 deletions
diff --git a/Makefile.am b/Makefile.am index 9a435e3a66..2d913bd7d7 100644 --- a/Makefile.am +++ b/Makefile.am @@ -6244,6 +6244,7 @@ substitutions = \ SED_PROCESS = \ $(AM_V_GEN)$(MKDIR_P) $(dir $@) && \ $(SED) $(subst '|,-e 's|@,$(subst =,\@|,$(subst |',|g',$(substitutions)))) \ + -e '/^\#\# /d' \ < $< > $@ units/%: units/%.in diff --git a/units/systemd-nspawn@.service.in b/units/systemd-nspawn@.service.in index c8141639b6..e8d1fff7ab 100644 --- a/units/systemd-nspawn@.service.in +++ b/units/systemd-nspawn@.service.in @@ -22,9 +22,9 @@ Slice=machine.slice Delegate=yes TasksMax=16384 -# Enforce a strict device policy, similar to the one nspawn configures -# when it allocates its own scope unit. Make sure to keep these -# policies in sync if you change them! +## Enforce a strict device policy, similar to the one nspawn configures +## when it allocates its own scope unit. Make sure to keep these +## policies in sync if you change them! DevicePolicy=closed DeviceAllow=/dev/net/tun rwm DeviceAllow=char-pts rw |