dilim/systemd
1
0 Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-11-06 05:17:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

sysupdate: Permit mount namespaces in Varlink service

Browse Source 
The Varlink service enumerates image targets and needs a private mount
namespace while dissecting images. Keep its sandbox in sync with
systemd-sysupdated.service.

Follow-up to 31616d00ef

Fixes #43604
This commit is contained in:
Totoro authored and Lennart Poettering committed 2026-09-05 08:22:45 +02:00
1 parent 726e17a933
commit 7fa7ff87cd
2 files changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

units/systemd-sysupdate-update.service.in
+1 -1
View File
@@ -25,7 +25,7 @@ NoNewPrivileges=yes
MemoryDenyWriteExecute=yes
ProtectHostname=yes
RestrictRealtime=yes
RestrictNamespaces=net
RestrictNamespaces=net mnt
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallFilter=@system-service @mount
SystemCallErrorNumber=EPERM
units/systemd-sysupdate@.service.in
+1 -1
View File
@@ -23,7 +23,7 @@ NoNewPrivileges=yes
MemoryDenyWriteExecute=yes
ProtectHostname=yes
RestrictRealtime=yes
RestrictNamespaces=net
RestrictNamespaces=net mnt
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallFilter=@system-service @mount
SystemCallErrorNumber=EPERM