diff options
| author |   Topi Miettinen <toiwoton@gmail.com> | 2017-07-04 15:48:18 +0300 |
|---|---|---|
| committer |   Lennart Poettering <lennart@poettering.net> | 2017-08-29 15:54:50 +0200 |
| commit | 78e864e5b3cc11b72ae663f49f42f158cafbfedf (patch) | |
| tree | 85d0a246d06126e77b1a13c9c80ee99111f53c9c /src/basic/process-util.h | |
| parent | Merge pull request #6636 from sourcejedi/fsync (diff) | |
| download | systemd-78e864e5b3cc11b72ae663f49f42f158cafbfedf.tar.gz systemd-78e864e5b3cc11b72ae663f49f42f158cafbfedf.tar.bz2 systemd-78e864e5b3cc11b72ae663f49f42f158cafbfedf.zip | |
seccomp: LockPersonality boolean (#6193)
Add LockPersonality boolean to allow locking down personality(2)
system call so that the execution domain can't be changed.
This may be useful to improve security because odd emulations
may be poorly tested and source of vulnerabilities, while
system services shouldn't need any weird personalities.
Diffstat (limited to 'src/basic/process-util.h')
0 files changed, 0 insertions, 0 deletions