Ricardo Branco
c68d985924
seccomp: also refuse sched_setattr() in RestrictRealtime=
...
RestrictRealtime= only filtered sched_setscheduler(). sched_setattr()
can switch a task to SCHED_FIFO and SCHED_RR as well, and is the only
way to get SCHED_DEADLINE, so a process that is otherwise allowed to use
realtime scheduling (CAP_SYS_NICE, or a non-zero RLIMIT_RTPRIO) could
bypass the restriction.
The policy is passed in a struct sched_attr by pointer, which seccomp
cannot inspect, so refuse the syscall altogether. This also affects
non-realtime callers of sched_setattr() (nice, utilization clamps),
which now get the same error as the refused policies. Document this in
systemd.exec(5) and extend the test.
CPUSchedulingPolicy= is applied through sched_setattr(), so a service
manager running under RestrictRealtime=yes (e.g. in a container) could
no longer start units with a non-realtime policy. Fall back to
sched_setscheduler() on EPERM, which the filter still allows for these
policies. This is not possible with CPUSchedulingResetOnFork=yes, as the
filter refuses SCHED_RESET_ON_FORK too, so setting the policy still
fails in that case.
Signed-off-by: Ricardo Branco <rbranco@suse.de >
(cherry picked from commit 590ff29a64 )
(cherry picked from commit 2d3dd0a4fc )
(cherry picked from commit a9f077a4f3 )
2026-10-17 14:45:51 +01:00
..
2026-06-23 15:14:19 +01:00
2025-07-25 12:33:13 +02:00
2024-06-06 12:07:08 +02:00
2026-02-20 21:20:45 +01:00
2024-12-25 17:00:31 +01:00
2026-01-19 22:41:33 +09:00
2026-10-17 14:45:49 +01:00
2025-07-25 12:33:13 +02:00
2026-02-18 18:47:15 +09:00
2026-01-27 19:20:30 +01:00
2026-02-23 16:43:09 +00:00
2025-11-23 18:09:11 +01:00
2026-06-23 15:14:18 +01:00
2026-01-16 22:56:28 +09:00
2026-01-27 13:43:33 +01:00
2026-01-18 15:50:54 +09:00
2024-12-25 17:00:31 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2025-12-20 15:27:22 +01:00
2025-01-19 04:37:14 +09:00
2025-11-23 18:09:11 +01:00
2026-07-23 21:22:12 +01:00
2026-07-23 20:04:29 +01:00
2024-12-25 17:24:38 +01:00
2025-12-10 14:17:11 +09:00
2026-09-10 20:24:54 +01:00
2025-06-28 15:31:46 +02:00
2025-09-18 10:57:38 +01:00
2026-02-19 15:08:20 +01:00
2025-11-13 16:14:25 +01:00
2025-02-16 20:08:39 +09:00
2025-03-15 07:27:38 +09:00
2025-11-23 18:09:11 +01:00
2025-11-13 00:08:31 +01:00
2026-09-10 20:47:26 +01:00
2026-04-13 12:40:16 +01:00
2026-07-23 20:04:28 +01:00
2025-08-10 13:40:32 +02:00
2025-12-05 11:57:18 +01:00
2024-08-21 15:17:02 +02:00
2024-12-25 17:24:38 +01:00
2024-08-21 15:17:02 +02:00
2025-08-11 10:30:26 +02:00
2025-06-18 16:58:18 +02:00
2025-11-19 22:01:15 +01:00
2025-07-11 18:15:12 +02:00
2025-06-28 15:31:46 +02:00
2025-10-04 18:13:27 +02:00
2024-06-06 12:07:08 +02:00
2025-05-28 15:35:53 +02:00
2025-06-14 03:41:20 +09:00
2024-08-22 04:26:32 +09:00
2025-07-25 12:33:13 +02:00
2025-01-29 04:28:10 +09:00
2025-12-18 10:53:27 +01:00
2025-10-09 06:32:59 +02:00
2026-02-09 02:05:57 +01:00
2025-03-07 18:14:25 +01:00
2026-01-21 21:32:49 +01:00
2026-02-19 15:05:15 +01:00
2025-02-20 18:13:21 +00:00
2024-11-08 14:14:36 +01:00
2026-07-23 21:22:11 +01:00
2025-09-24 14:11:59 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2026-09-10 22:26:20 +01:00
2026-10-17 14:45:49 +01:00
2026-10-17 14:45:49 +01:00
2025-08-11 10:30:26 +02:00
2025-08-11 10:30:26 +02:00
2026-05-22 13:32:04 +01:00
2025-05-13 08:33:10 +09:00
2024-11-26 17:28:14 +01:00
2026-02-17 15:27:24 +01:00
2026-10-17 14:45:50 +01:00
2024-12-25 17:00:31 +01:00
2025-04-02 20:32:17 +09:00
2026-10-17 14:45:49 +01:00
2026-09-10 20:47:26 +01:00
2025-02-11 18:29:39 +09:00
2026-09-10 22:26:19 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:51 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-09-10 20:25:52 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2024-12-25 17:24:38 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:50 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2025-05-29 18:40:18 +09:00
2026-10-17 14:45:49 +01:00
2025-05-31 04:40:33 +09:00
2025-05-25 05:01:27 +09:00
2025-05-25 05:01:27 +09:00
2024-11-07 18:51:21 +09:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-07-23 20:04:28 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:28 +01:00
2024-11-11 20:31:08 +01:00
2024-04-20 12:10:42 +02:00
2026-05-22 13:57:29 +01:00
2025-10-04 23:26:47 +02:00
2025-04-02 17:29:49 +02:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2026-10-17 14:45:49 +01:00
2026-10-17 14:45:49 +01:00
2024-04-17 22:01:53 +02:00
2025-11-01 21:58:28 +01:00
2025-10-22 09:34:14 +02:00
2026-09-10 22:26:20 +01:00
2025-11-13 14:11:11 +01:00
2025-06-05 00:28:01 +02:00
2025-06-05 01:35:08 +02:00
2026-02-17 15:27:24 +01:00
2025-10-16 16:24:29 +02:00
2025-04-30 10:34:44 +02:00
2025-04-30 10:34:44 +02:00
2025-09-18 15:56:11 +02:00
2025-04-30 10:34:44 +02:00
2025-09-19 20:25:26 +09:00
2025-04-21 04:18:19 +09:00
2025-06-05 01:35:08 +02:00
2026-09-10 20:47:26 +01:00
2024-11-11 20:31:08 +01:00
2025-10-04 23:26:47 +02:00
2024-12-25 17:00:31 +01:00
2026-02-17 15:27:24 +01:00
2025-08-10 13:40:32 +02:00
2026-02-13 19:07:20 +01:00
2026-07-23 21:22:11 +01:00
2026-03-23 14:17:34 +01:00
2024-12-25 17:00:31 +01:00
2025-11-23 18:09:11 +01:00
2025-12-24 07:37:58 +01:00
2026-10-17 14:45:49 +01:00
2025-12-12 21:54:47 +09:00
2026-01-07 00:47:53 +01:00
2025-10-16 12:58:59 +01:00
2026-10-17 14:45:49 +01:00
2024-12-25 17:24:38 +01:00
2026-03-04 08:28:29 +01:00
2024-11-07 18:51:21 +09:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2025-11-23 18:09:11 +01:00
2026-04-13 12:40:16 +01:00
2025-05-14 09:33:57 +02:00
2026-10-17 14:45:49 +01:00
2026-02-18 03:28:12 +09:00
2026-10-17 14:45:49 +01:00
2026-05-22 13:57:29 +01:00
2026-09-10 22:26:20 +01:00
2026-09-10 20:47:26 +01:00
2026-03-05 09:53:43 +01:00
2026-09-10 20:47:26 +01:00
2025-05-28 15:35:53 +02:00
2025-07-24 11:38:47 +02:00
2025-01-15 13:51:12 +09:00
2026-02-20 21:20:45 +01:00
2025-03-05 12:37:26 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:29 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 20:04:29 +01:00
2026-10-17 14:45:49 +01:00
2026-07-23 21:22:11 +01:00
2025-03-07 18:15:01 +01:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2025-11-23 18:09:11 +01:00
2025-11-23 18:09:11 +01:00
2024-11-05 22:57:51 +01:00
2025-12-17 23:23:44 +00:00
2025-06-21 02:08:03 +09:00
2024-12-25 17:24:38 +01:00
2026-10-17 14:45:49 +01:00
2025-07-10 21:38:36 +02:00
2025-12-18 13:57:32 +01:00
2024-11-05 22:57:51 +01:00
2025-11-12 08:45:55 +09:00
2025-02-21 09:57:02 +01:00
2024-05-25 02:13:00 +09:00
2024-11-24 01:11:42 +09:00
2024-11-11 20:31:08 +01:00
2025-11-23 18:09:11 +01:00
2025-03-03 10:45:57 +01:00
2026-09-10 22:26:19 +01:00
2026-02-20 01:18:54 +09:00
2025-09-26 09:42:13 +02:00
2025-05-28 15:35:53 +02:00
2025-01-28 08:49:49 -05:00
2025-05-04 12:27:50 +09:00
2025-09-22 08:47:57 +02:00
2026-03-23 14:17:34 +01:00
2026-10-17 14:45:50 +01:00
2025-01-14 14:42:23 +01:00
2024-07-28 10:33:49 +01:00
2026-10-17 14:45:50 +01:00
2026-06-23 15:14:19 +01:00
2024-11-05 22:57:51 +01:00
2025-05-28 15:35:53 +02:00
2024-11-05 22:57:51 +01:00
2025-01-03 21:14:47 +01:00
2026-10-17 14:45:49 +01:00
2026-10-17 14:45:49 +01:00
2025-03-25 10:37:12 +01:00
2026-09-10 20:47:26 +01:00
2026-02-21 03:00:51 +09:00
2025-08-04 05:30:16 +09:00
2024-11-26 17:28:14 +01:00
2024-11-11 20:31:08 +01:00
2026-07-23 21:22:11 +01:00
2026-10-17 14:45:49 +01:00
2026-02-05 10:28:47 +01:00
2025-10-22 09:34:14 +02:00
2024-04-22 15:16:54 +02:00
2025-05-28 15:35:53 +02:00
2025-09-03 13:04:34 +02:00
2025-07-03 17:36:09 +02:00
2025-04-20 15:15:54 +02:00
2025-11-13 14:45:51 +01:00
2024-12-25 17:24:38 +01:00
2026-06-23 15:14:19 +01:00
2024-05-28 14:48:53 +02:00
2026-09-10 20:47:26 +01:00
2026-02-26 05:26:36 +09:00
2025-11-13 00:08:27 +01:00
2026-02-09 12:05:10 +00:00
2024-11-05 22:57:51 +01:00
2026-07-23 20:04:28 +01:00
2024-11-05 22:57:51 +01:00
2025-05-28 15:35:53 +02:00
2026-07-23 20:04:28 +01:00
2025-03-05 12:37:51 +01:00
2026-01-06 22:50:47 +01:00
2025-11-02 21:14:35 +01:00
2025-01-21 04:12:18 +09:00
2025-03-20 15:57:14 +01:00
2025-07-13 05:49:00 +09:00
2025-09-18 13:29:33 +02:00
2026-04-13 12:40:16 +01:00
2026-09-10 20:47:26 +01:00
2024-10-24 10:07:28 +02:00
2024-10-24 09:54:48 +02:00
2026-05-22 13:57:30 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2026-02-16 11:09:48 +01:00
2025-09-18 10:57:38 +01:00
2024-06-11 18:02:31 +01:00
2026-10-17 14:45:51 +01:00
2026-10-17 14:45:50 +01:00
2025-11-23 18:09:11 +01:00
2025-12-19 09:17:41 +00:00
2025-05-28 15:34:47 +02:00
2026-01-17 02:52:20 +09:00
2025-07-16 05:47:38 +09:00
2026-06-23 15:14:19 +01:00
2025-12-18 10:54:51 +01:00
2026-10-17 14:45:49 +01:00
2026-09-10 20:47:25 +01:00
2026-02-25 11:31:06 +01:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2025-09-18 10:59:12 +01:00
2025-07-03 17:43:01 +02:00
2026-05-22 13:57:30 +01:00
2026-09-10 20:47:26 +01:00
2026-10-17 14:45:51 +01:00
2025-04-22 18:53:51 +02:00
2026-01-05 03:20:26 +09:00
2026-09-10 20:47:26 +01:00
2025-03-25 10:40:12 +01:00
2024-11-05 22:57:51 +01:00
2026-09-10 20:47:26 +01:00
2025-07-13 05:49:09 +09:00
2025-08-01 12:43:44 +01:00
2025-06-17 16:05:12 +02:00
2026-09-10 22:26:20 +01:00
2025-11-23 18:09:11 +01:00
2026-06-23 15:14:18 +01:00
2026-01-20 21:22:35 +01:00
2025-07-07 11:21:25 +02:00
2026-10-17 14:45:49 +01:00
2025-10-04 23:26:47 +02:00
2025-03-24 12:59:27 +00:00
2024-11-11 20:31:08 +01:00
2026-05-22 13:57:30 +01:00
2025-01-19 04:37:14 +09:00
2025-02-26 20:34:15 +09:00
2025-09-27 16:28:18 +03:00
2024-11-06 19:06:40 +09:00
2024-06-06 12:07:08 +02:00
2025-09-18 10:57:38 +01:00
2026-07-23 20:04:29 +01:00
2025-02-27 10:08:50 +01:00
2025-01-05 09:40:05 +05:30
2026-10-17 14:45:49 +01:00
2024-10-04 12:45:21 +01:00
2024-10-31 21:08:08 +00:00
2024-05-28 16:30:54 +02:00
2025-01-23 22:36:39 +01:00
2026-09-10 20:47:26 +01:00
2026-07-23 20:04:29 +01:00
2025-11-13 00:08:27 +01:00
2026-02-17 22:00:14 +01:00
2026-03-06 09:52:37 +09:00
2025-01-19 04:37:14 +09:00