From 4298d0b5128326621c8f537107c4c8b459490721 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Tue, 25 Feb 2014 20:37:03 +0100 Subject: core: add new RestrictAddressFamilies= switch This new unit settings allows restricting which address families are available to processes. This is an effective way to minimize the attack surface of services, by turning off entire network stacks for them. This is based on seccomp, and does not work on x86-32, since seccomp cannot filter socketcall() syscalls on that platform. --- src/shared/.gitignore | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/shared/.gitignore') diff --git a/src/shared/.gitignore b/src/shared/.gitignore index c9b5f81719..9f4ec9f9c6 100644 --- a/src/shared/.gitignore +++ b/src/shared/.gitignore @@ -2,3 +2,7 @@ /errno-from-name.h /errno-list.txt /errno-to-name.h +/af-from-name.gperf +/af-from-name.h +/af-list.txt +/af-to-name.h -- cgit v1.2.3-54-g00ecf