Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

systemd: restore sandboxing options and add PrivateUsers=yes to make them work as user units #1181

Merged
merged 2 commits into from
Nov 5, 2022
Merged

systemd: restore sandboxing options and add PrivateUsers=yes to make them work as user units #1181

merged 2 commits into from
Nov 5, 2022

Commits on Nov 3, 2022

  1. Revert "Remove systemd hardening options for system services" 

    This reverts commit ecd5f01.
    @bluca
    bluca committed Nov 3, 2022
    Configuration menu
    Copy the full SHA
    ff3db9c View commit details
    Browse the repository at this point in the history

  2. systemd: use PrivateUsers= in user unit 

    ProtectSystem= and other sandboxing options require a user namespace in
order to work as user units (the user manager does not run as root and
thus without a user namespace it is unable to perform mounts).
    @bluca
    bluca committed Nov 3, 2022
    Configuration menu
    Copy the full SHA
    7656adb View commit details
    Browse the repository at this point in the history