From 71f43fc88212d4dc9ca0e2152941d8e078ab4c94 Mon Sep 17 00:00:00 2001 From: Takeo Kondo Date: Sat, 7 Sep 2024 00:21:46 +0900 Subject: [PATCH] man: CAP_SYS_ADMIN does NOT grant any permission for dbus API --- man/org.freedesktop.systemd1.xml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/man/org.freedesktop.systemd1.xml b/man/org.freedesktop.systemd1.xml index 2db2c2e1aa6..3bf7ed0bd09 100644 --- a/man/org.freedesktop.systemd1.xml +++ b/man/org.freedesktop.systemd1.xml @@ -2667,8 +2667,7 @@ node /org/freedesktop/systemd1/unit/avahi_2ddaemon_2eservice { Security Similarly to methods on the Manager object, read-only access is - allowed for everyone. All operations are allowed for clients with the - CAP_SYS_ADMIN capability or when the + allowed for everyone. All operations are allowed for clients when the org.freedesktop.systemd1.manage-units privilege is granted by polkit.