shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-03-28 02:50:16 +03:00
Code

units: set capability bounding set for syslog services

Browse Source
This commit is contained in:
Lennart Poettering 2011-04-20 03:34:58 +02:00
parent ec8b119434
commit 9534ce5485
3 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
TODO
View File

@ -25,12 +25,18 @@ F15:
* don't trim empty cgroups
https://bugzilla.redhat.com/show_bug.cgi?id=678555
* drop cap bounding set in logger, hostnamed, readahead, ...
* make anaconda write timeout=0 for encrypted devices
* Fix assert http://lists.freedesktop.org/archives/systemd-devel/2011-April/001910.html
Features:
* maybe lower default timeout to 2min?
* GC unreferenced jobs (such as .device jobs)
* support wildcard expansion in ListeStream= and friends
* Add ListenSpecial to .socket units for /proc/kmsg and similar friends?
* avoid DefaultStandardOutput=syslog to have any effect on StandardInput=socket services
@ -205,6 +211,8 @@ Features:
* allow runtime changing of log level and target
* drop cap bounding set in readahead and other services
External:
* udisks should not use udisks-part-id, instead use blkid. also not probe /dev/loopxxx

1
units/systemd-kmsg-syslogd.service.in
View File

@ -16,3 +16,4 @@ ExecStart=@rootlibexecdir@/systemd-kmsg-syslogd
NotifyAccess=all
StandardOutput=null
Sockets=syslog.socket
CapabilityBoundingSet=CAP_DAC_OVERRIDE

1
units/systemd-logger.service.in
View File

@ -17,3 +17,4 @@ After=syslog.socket
ExecStart=@rootlibexecdir@/systemd-logger
NotifyAccess=all
StandardOutput=null
CapabilityBoundingSet=CAP_SYS_ADMIN CAP_SETUID CAP_SETGID