dilim/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2026-08-09 01:20:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

man: mention openat2 effect of RestrictSUIDSGID

Browse Source 
RestrictSUIDSGID uses seccomp to block setting SUID/SGID bits.
openat2() passes these mode bits indirectly via struct open_how.
Document that such calls are blocked regardless of requested mode.

Closes #43314
This commit is contained in:
dongshengyuan
2026-08-07 13:37:51 +08:00
committed by Yu Watanabe
parent 8c3af1bc82
commit a399bc519c
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
man/systemd.exec.xml
View File

@@ -2818,6 +2818,11 @@ RestrictNamespaces=~cgroup net</programlisting>
<citerefentry><refentrytitle>systemd-system.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>, which
defaults to off.</para>
<para>This setting is implemented using seccomp filtering. For system calls where the mode bits are
passed directly as arguments, the call is denied only when the SUID or SGID bits are set. For system
calls where those bits are passed indirectly and cannot be inspected by the filter, such as
<function>openat2()</function>, the call is blocked entirely, regardless of the requested mode.</para>
<xi:include href="version-info.xml" xpointer="v242"/></listitem>
</varlistentry>