| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2014-02-26 | core: add new RestrictAddressFamilies= switch | Lennart Poettering | |
| This new unit settings allows restricting which address families are available to processes. This is an effective way to minimize the attack surface of services, by turning off entire network stacks for them. This is based on seccomp, and does not work on x86-32, since seccomp cannot filter socketcall() syscalls on that platform. | |||
 |
index : ~lukeshu/systemd | |
| Unnamed repository; edit this file 'description' to name the repository. | git-mirror |
| summaryrefslogtreecommitdiff |