picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

man: say that SecureBits= are space separated

Browse source
This commit is contained in:
Zbigniew Jędrzejewski-Szmek 2014-10-03 21:06:52 -04:00
parent cef3566998
commit e060073a8f
1 changed files with 11 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
man/systemd.exec.xml
View file

@ -776,20 +776,22 @@
<varlistentry>
<term><varname>SecureBits=</varname></term>
<listitem><para>Controls the secure
bits set for the executed process. See
<citerefentry project='man-pages'><refentrytitle>capabilities</refentrytitle><manvolnum>7</manvolnum></citerefentry>
for details. Takes a list of strings:
bits set for the executed process.
Takes a space-separated combination of
options from the following list:
<option>keep-caps</option>,
<option>keep-caps-locked</option>,
<option>no-setuid-fixup</option>,
<option>no-setuid-fixup-locked</option>,
<option>noroot</option> and/or
<option>noroot</option>, and
<option>noroot-locked</option>. This
option may appear more than once in
which case the secure bits are
ORed. If the empty string is assigned
to this option, the bits are reset to
0.</para></listitem>
which case the secure bits are ORed.
If the empty string is assigned to
this option, the bits are reset to 0.
See <citerefentry
project='man-pages'><refentrytitle>capabilities</refentrytitle><manvolnum>7</manvolnum></citerefentry>
for details.</para></listitem>
</varlistentry>
<varlistentry>
@ -806,7 +808,7 @@
attached to the executed file. Due to
that
<varname>CapabilityBoundingSet=</varname>
is probably the much more useful
is probably a much more useful
setting.</para></listitem>
</varlistentry>