On Sat, 14.02.15 12:32, Topi Miettinen (toiwo...@gmail.com) wrote:
Sorry for the late response, still going through piles of mail.
No setuid programs are expected to be executed, so add
SecureBits=no-setuid-fixup no-setuid-fixup-locked
to unit files.
So, hmm, after reading the man page
On 04/24/15 14:52, Lennart Poettering wrote:
On Sat, 14.02.15 12:32, Topi Miettinen (toiwo...@gmail.com) wrote:
Sorry for the late response, still going through piles of mail.
No setuid programs are expected to be executed, so add
SecureBits=no-setuid-fixup no-setuid-fixup-locked
to unit
On Fri, 24.04.15 16:42, Topi Miettinen (toiwo...@gmail.com) wrote:
I think all long-running ones that reasonably can already do. I mean,
things like logind simple need too many caps, it's really not worth
trying to make them run under a different uid, because they have so
much privs
On 02/11/15 16:32, Lennart Poettering wrote:
On Wed, 11.02.15 16:24, Topi Miettinen (toiwo...@gmail.com) wrote:
On 02/10/15 21:00, Lennart Poettering wrote:
On Sat, 07.02.15 10:40, Topi Miettinen (toiwo...@gmail.com) wrote:
No setuid programs are expected to be executed, so add
On 02/10/15 21:00, Lennart Poettering wrote:
On Sat, 07.02.15 10:40, Topi Miettinen (toiwo...@gmail.com) wrote:
No setuid programs are expected to be executed, so add
SecureBits=no-setuid-fixup no-setuid-fixup-locked
to unit files.
So, hmm, after reading the man page again: what's the
On Wed, 11.02.15 16:24, Topi Miettinen (toiwo...@gmail.com) wrote:
On 02/10/15 21:00, Lennart Poettering wrote:
On Sat, 07.02.15 10:40, Topi Miettinen (toiwo...@gmail.com) wrote:
No setuid programs are expected to be executed, so add
SecureBits=no-setuid-fixup no-setuid-fixup-locked
On Sat, 07.02.15 10:40, Topi Miettinen (toiwo...@gmail.com) wrote:
No setuid programs are expected to be executed, so add
SecureBits=no-setuid-fixup no-setuid-fixup-locked
to unit files.
So, hmm, after reading the man page again: what's the rationale for
precisely these bits?
I mean
No setuid programs are expected to be executed, so add
SecureBits=no-setuid-fixup no-setuid-fixup-locked
to unit files.
---
units/systemd-hostnamed.service.in| 1 +
units/systemd-importd.service.in | 1 +
units/systemd-journal-gatewayd.service.in | 1 +
