ec8927ca59
This also ensures that caps dropped from the bounding set are also dropped from the inheritable set, to be extra-secure. Usually that should change very little though as the inheritable set is empty for all our uses anyway.
44 lines
1,012 B
Plaintext
44 lines
1,012 B
Plaintext
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# See systemd.conf(5) for details
|
|
|
|
[Manager]
|
|
#LogLevel=info
|
|
#LogTarget=journal-or-kmsg
|
|
#LogColor=yes
|
|
#LogLocation=no
|
|
#DumpCore=yes
|
|
#CrashShell=no
|
|
#ShowStatus=yes
|
|
#SysVConsole=yes
|
|
#CrashChVT=1
|
|
#CPUAffinity=1 2
|
|
#DefaultControllers=cpu
|
|
#DefaultStandardOutput=journal
|
|
#DefaultStandardError=inherit
|
|
#JoinControllers=cpu,cpuacct
|
|
#RuntimeWatchdogSec=0
|
|
#ShutdownWatchdogSec=10min
|
|
#CapabilityBoundingSet=
|
|
#DefaultLimitCPU=
|
|
#DefaultLimitFSIZE=
|
|
#DefaultLimitDATA=
|
|
#DefaultLimitSTACK=
|
|
#DefaultLimitCORE=
|
|
#DefaultLimitRSS=
|
|
#DefaultLimitNOFILE=
|
|
#DefaultLimitAS=
|
|
#DefaultLimitNPROC=
|
|
#DefaultLimitMEMLOCK=
|
|
#DefaultLimitLOCKS=
|
|
#DefaultLimitSIGPENDING=
|
|
#DefaultLimitMSGQUEUE=
|
|
#DefaultLimitNICE=
|
|
#DefaultLimitRTPRIO=
|
|
#DefaultLimitRTTIME=
|