From aea54018a5e66a41318afb6c6be745b6aef48d9e Mon Sep 17 00:00:00 2001 From: Dave Reisner Date: Mon, 5 Nov 2012 12:50:19 -0500 Subject: Implement SocketUser= and SocketGroup= for [Socket] Since we already allow defining the mode of AF_UNIX sockets and FIFO, it makes sense to also allow specific user/group ownership of the socket file for restricting access. --- man/systemd.socket.xml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) (limited to 'man/systemd.socket.xml') diff --git a/man/systemd.socket.xml b/man/systemd.socket.xml index 4b1fcc8b0c..dc0d78f0a2 100644 --- a/man/systemd.socket.xml +++ b/man/systemd.socket.xml @@ -357,6 +357,30 @@ 0666. + + SocketUser= + If listening on a file system + socket or FIFO, this option specifies the + user owner of the created socket. When + defining this, keep in mind that name + switch services for user name lookups may + not be available. It is advisable to use a + numeric UID for this + setting. + + + + SocketGroup= + If listening on a file system + socket or FIFO, this option specifies the + group owner of the created socket. When + defining this, keep in mind that name + switch services for group name lookups may + not be available. It is advisable to use a + numeric GID for this + setting. + + Accept= Takes a boolean -- cgit v1.2.3-54-g00ecf