1
1
mirror of https://github.com/systemd/systemd-stable.git synced 2025-01-25 06:03:40 +03:00
Topi Miettinen ddc155b2fd New directives NoExecPaths= ExecPaths=
Implement directives `NoExecPaths=` and `ExecPaths=` to control `MS_NOEXEC`
mount flag for the file system tree. This can be used to implement file system
W^X policies, and for example with allow-listing mode (NoExecPaths=/) a
compromised service would not be able to execute a shell, if that was not
explicitly allowed.

Example:
[Service]
NoExecPaths=/
ExecPaths=/usr/bin/daemon /usr/lib64 /usr/lib

Closes: #17942.
2021-01-29 12:40:52 +00:00
..
2020-11-25 09:48:17 +01:00
2020-12-17 20:02:32 +01:00
2020-12-16 18:30:15 +01:00
2020-11-18 16:27:14 +09:00
2020-03-27 20:12:44 +01:00
2020-12-17 20:02:32 +01:00
2020-12-16 17:21:48 +01:00
2021-01-04 11:01:17 +00:00
2021-01-04 11:01:17 +00:00
2021-01-04 11:01:17 +00:00
2021-01-25 12:31:17 +09:00
2020-12-18 12:59:29 +09:00
2021-01-15 10:33:28 +01:00
2020-11-09 13:23:58 +09:00
2020-12-17 20:02:32 +01:00
2020-12-16 17:21:48 +01:00
2020-12-17 20:02:32 +01:00