From 15ae422b7471cf6f41ccf450243d8afd8ea0a054 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Wed, 21 Apr 2010 22:15:06 +0200 Subject: execute: support basic filesystem namespacing --- execute.h | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'execute.h') diff --git a/execute.h b/execute.h index cafaf6b631..f820d56cb8 100644 --- a/execute.h +++ b/execute.h @@ -109,6 +109,9 @@ struct ExecContext { char *group; char **supplementary_groups; + char **read_write_dirs, **read_only_dirs, **inaccessible_dirs; + unsigned long mount_flags; + uint64_t capability_bounding_set_drop; cap_t capabilities; @@ -116,6 +119,7 @@ struct ExecContext { bool cpu_sched_reset_on_fork; bool non_blocking; + bool private_tmp; bool oom_adjust_set:1; bool nice_set:1; -- cgit v1.2.3-54-g00ecf