2 commits

Author	SHA1	Message	Date
Kay Sievers	a095315b3c	build-sys: split internal basic/ library from shared/ ... basic/ can be used by everything cannot use anything outside of basic/ libsystemd/ can use basic/ cannot use shared/ shared/ can use libsystemd/	2015-06-11 10:52:46 +02:00
Lennart Poettering	4298d0b512	core: add new RestrictAddressFamilies= switch ... This new unit settings allows restricting which address families are available to processes. This is an effective way to minimize the attack surface of services, by turning off entire network stacks for them. This is based on seccomp, and does not work on x86-32, since seccomp cannot filter socketcall() syscalls on that platform.	2014-02-26 02:19:28 +01:00