dilim/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-08-09 17:38:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

man: note that sd-tmpfiles/sysusers --root is not a sandboxing feature

Browse Source 
This seems to be causing enough confusion that it is worth explicitly
mentioning in the docs
This commit is contained in:
Luca Boccassi
2026-07-02 09:10:27 +01:00
parent ff30101e81
commit 243fcc6200
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
man/systemd-sysusers.xml
View File

@@ -66,6 +66,10 @@
<replaceable>root</replaceable> path, including config search
paths. </para>
<para>Note that this is not a sandboxing or security feature.
<citerefentry><refentrytitle>sysusers.d</refentrytitle><manvolnum>5</manvolnum></citerefentry>
definitions are potentially not processed in a hermetic fashion to the specified root.</para>
<xi:include href="version-info.xml" xpointer="v215"/></listitem>
</varlistentry>

4
man/systemd-tmpfiles.xml
View File

@@ -262,6 +262,10 @@
or directories below mount points in the OS image operated on that are typically overmounted during
runtime.</para>
<para>Note that this is not a sandboxing or security feature.
<citerefentry><refentrytitle>tmpfiles.d</refentrytitle><manvolnum>5</manvolnum></citerefentry>
definitions are potentially not processed in a hermetic fashion to the specified root.</para>
<xi:include href="version-info.xml" xpointer="v212"/></listitem>
</varlistentry>