From ac45f971a12280de55b834a65237f72dcacfc099 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Wed, 19 Feb 2014 02:15:24 +0100 Subject: core: add Personality= option for units to set the personality for spawned processes --- man/systemd.exec.xml | 37 +++++++++++++++++++++++++++---------- 1 file changed, 27 insertions(+), 10 deletions(-) (limited to 'man/systemd.exec.xml') diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index e82e1f59f0..7f97ca035d 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -1063,9 +1063,9 @@ is triggered, instead of terminating the process immediately. Takes an error name such as - EPERM, - EACCES or - EUCLEAN. When this + EPERM, + EACCES or + EUCLEAN. When this setting is not used, or when the empty string is assigned, the process will be terminated immediately when the filter @@ -1080,12 +1080,12 @@ identifiers to include in the system call filter. The known architecture identifiers are - x86, - x86-64, - x32, - arm as well as the + x86, + x86-64, + x32, + arm as well as the special identifier - native. Only system + native. Only system calls of the specified architectures will be permitted to processes of this unit. This is an effective way to @@ -1094,20 +1094,37 @@ example to prohibit execution of 32-bit x86 binaries on 64-bit x86-64 systems. The special - native identifier + native identifier implicitly maps to the native architecture of the system (or more strictly: to the architecture the system manager is compiled for). Note that setting this option to a non-empty list implies that - native is included + native is included too. By default, this option is set to the empty list, i.e. no architecture system call filtering is applied. + + Personality= + + Controls which + kernel architecture + uname2 + shall report, when invoked by unit + processes. Takes one of + x86 and + x86-64. This is + useful when running 32bit services on + a 64bit host system. If not specified + the personality is left unmodified and + thus reflects the personality of the + host system's + kernel. + -- cgit v1.2.3-54-g00ecf