diff options
Diffstat (limited to 'man/systemd.exec.xml')
| -rw-r--r-- | man/systemd.exec.xml | 27 |
1 files changed, 16 insertions, 11 deletions
diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 11b160e58f..ea53722f0f 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -1,5 +1,8 @@ <!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" - "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"> + "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [ +<!ENTITY % entities SYSTEM "custom-entities.ent" > +%entities; +]> <!-- This file is part of systemd. @@ -283,7 +286,9 @@ shortly before the process is executed (more specifically, after all processes from a previous unit state terminated. This means you can generate these files in one unit state, and - read it with this option in the next). Settings from these + read it with this option in the next).</para> + + <para>Settings from these files override settings made with <varname>Environment=</varname>. If the same variable is set twice from these files, the files will be read in the order @@ -334,7 +339,7 @@ service was activated from, which is primarily useful for compatibility with daemons designed for use with the traditional - <citerefentry><refentrytitle>inetd</refentrytitle><manvolnum>8</manvolnum></citerefentry> + <citerefentry project='freebsd'><refentrytitle>inetd</refentrytitle><manvolnum>8</manvolnum></citerefentry> daemon.</para> <para>This setting defaults to @@ -661,7 +666,7 @@ <citerefentry project='man-pages'><refentrytitle>capabilities</refentrytitle><manvolnum>7</manvolnum></citerefentry> for details. Takes a whitespace-separated list of capability names as read by - <citerefentry><refentrytitle>cap_from_name</refentrytitle><manvolnum>3</manvolnum></citerefentry>, + <citerefentry project='mankier'><refentrytitle>cap_from_name</refentrytitle><manvolnum>3</manvolnum></citerefentry>, e.g. <constant>CAP_SYS_ADMIN</constant>, <constant>CAP_DAC_OVERRIDE</constant>, <constant>CAP_SYS_PTRACE</constant>. Capabilities listed will @@ -709,7 +714,7 @@ set for the executed process. Take a capability string describing the effective, permitted and inherited capability sets as documented in - <citerefentry><refentrytitle>cap_from_text</refentrytitle><manvolnum>3</manvolnum></citerefentry>. + <citerefentry project='mankier'><refentrytitle>cap_from_text</refentrytitle><manvolnum>3</manvolnum></citerefentry>. Note that these capability sets are usually influenced (and filtered) by the capabilities attached to the executed file. Due to that <varname>CapabilityBoundingSet=</varname> is @@ -879,7 +884,7 @@ <option>private</option>, which control whether mounts in the file system namespace set up for this unit's processes will receive or propagate mounts or unmounts. See - <citerefentry><refentrytitle>mount</refentrytitle><manvolnum>2</manvolnum></citerefentry> + <citerefentry project='man-pages'><refentrytitle>mount</refentrytitle><manvolnum>2</manvolnum></citerefentry> for details. Defaults to <option>shared</option>. Use <option>shared</option> to ensure that mounts and unmounts are propagated from the host to the container and vice versa. Use @@ -927,7 +932,7 @@ authorize the transition. This directive is ignored if SELinux is disabled. If prefixed by <literal>-</literal>, all errors will be ignored. See - <citerefentry><refentrytitle>setexeccon</refentrytitle><manvolnum>3</manvolnum></citerefentry> + <citerefentry project='die-net'><refentrytitle>setexeccon</refentrytitle><manvolnum>3</manvolnum></citerefentry> for details.</para></listitem> </varlistentry> @@ -1074,7 +1079,7 @@ prefixed with <constant>~</constant> the listed address families will be applied as blacklist, otherwise as whitelist. Note that this restricts access to the - <citerefentry><refentrytitle>socket</refentrytitle><manvolnum>2</manvolnum></citerefentry> + <citerefentry project='man-pages'><refentrytitle>socket</refentrytitle><manvolnum>2</manvolnum></citerefentry> system call only. Sockets passed into the process by other means (for example, by using socket activation with socket units, see @@ -1102,7 +1107,7 @@ <term><varname>Personality=</varname></term> <listitem><para>Controls which kernel architecture - <citerefentry><refentrytitle>uname</refentrytitle><manvolnum>2</manvolnum></citerefentry> + <citerefentry project='man-pages'><refentrytitle>uname</refentrytitle><manvolnum>2</manvolnum></citerefentry> shall report, when invoked by unit processes. Takes one of <constant>x86</constant> and <constant>x86-64</constant>. This is useful when running 32-bit services on a 64-bit host @@ -1164,7 +1169,7 @@ <term><varname>$LANG</varname></term> <listitem><para>Locale. Can be set in - <citerefentry><refentrytitle>locale.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry> + <citerefentry project='man-pages'><refentrytitle>locale.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry> or on the kernel command line (see <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry> and @@ -1182,7 +1187,7 @@ login shell. The variables are set for the units that have <varname>User=</varname> set, which includes user <command>systemd</command> instances. See - <citerefentry><refentrytitle>passwd</refentrytitle><manvolnum>5</manvolnum></citerefentry>. + <citerefentry project='die-net'><refentrytitle>passwd</refentrytitle><manvolnum>5</manvolnum></citerefentry>. </para></listitem> </varlistentry> |