diff options
| author |   James Cowgill <james410@cowgill.org.uk> | 2017-05-03 17:35:45 +0100 |
|---|---|---|
| committer |   Martin Pitt <martinpitt@users.noreply.github.com> | 2017-05-03 18:35:45 +0200 |
| commit | a3645cc6dd84ea2bde71ff23c1bed1c38315ce0a (patch) | |
| tree | 1bf2a2d4b09a491f65c1058ca3441e2df46cdd5e /man/systemd.exec.xml | |
| parent | Merge pull request #5842 from keszybz/meson-status-and-conditionals (diff) | |
| download | systemd-a3645cc6dd84ea2bde71ff23c1bed1c38315ce0a.tar.gz systemd-a3645cc6dd84ea2bde71ff23c1bed1c38315ce0a.tar.bz2 systemd-a3645cc6dd84ea2bde71ff23c1bed1c38315ce0a.zip | |
seccomp: add clone syscall definitions for mips (#5880)
Also updates the documentation and adds a mention of ppc64 support
which was enabled by #5325.
Tested on Debian mipsel and mips64el. The other 4 mips architectures
should have an identical user <-> kernel ABI to one of the 2 tested
systems.
Diffstat (limited to 'man/systemd.exec.xml')
| -rw-r--r-- | man/systemd.exec.xml | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 8c4988abe..3ed8dd8f0 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -1597,7 +1597,8 @@ the specified flags parameters into account. Note that — if this option is used — in addition to restricting creation and switching of the specified types of namespaces (or all of them, if true) access to the <function>setns()</function> system call with a zero flags parameter is prohibited. This setting is only - supported on x86, x86-64, s390 and s390x, and enforces no restrictions on other architectures. If running in user + supported on x86, x86-64, mips, mips-le, mips64, mips64-le, mips64-n32, mips64-le-n32, ppc64, ppc64-le, + s390 and s390x, and enforces no restrictions on other architectures. If running in user mode, or in system mode, but without the <constant>CAP_SYS_ADMIN</constant> capability (e.g. setting <varname>User=</varname>), <varname>NoNewPrivileges=yes</varname> is implied. </para></listitem> </varlistentry> |