dilim/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-08-11 09:36:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

man: note that sd-tmpfiles/sysusers --root is not a sandboxing feature

Browse Source 
This seems to be causing enough confusion that it is worth explicitly
mentioning in the docs

(cherry picked from commit 243fcc6200)
(cherry picked from commit c12e4a6e28)
This commit is contained in:
Luca Boccassi
2026-07-02 09:10:27 +01:00
parent 64d15be6f0
commit 647b398cfc
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
man/systemd-sysusers.xml
View File

@@ -66,6 +66,10 @@
<replaceable>root</replaceable> path, including config search
paths. </para>
<para>Note that this is not a sandboxing or security feature.
<citerefentry><refentrytitle>sysusers.d</refentrytitle><manvolnum>5</manvolnum></citerefentry>
definitions are potentially not processed in a hermetic fashion to the specified root.</para>
<xi:include href="version-info.xml" xpointer="v215"/></listitem>
</varlistentry>

4
man/systemd-tmpfiles.xml
View File

@@ -254,6 +254,10 @@
or directories below mount points in the OS image operated on that are typically overmounted during
runtime.</para>
<para>Note that this is not a sandboxing or security feature.
<citerefentry><refentrytitle>tmpfiles.d</refentrytitle><manvolnum>5</manvolnum></citerefentry>
definitions are potentially not processed in a hermetic fashion to the specified root.</para>
<xi:include href="version-info.xml" xpointer="v212"/></listitem>
</varlistentry>