4 Commits

Author	SHA1	Message	Date
Lennart Poettering	ba2fb17d8b	units: add SystemCallErrorNumber=EPERM to systemd-portabled.service ... We use that on all other services, and hence should here too. Otherwise the service will be killed with SIGSYS when doing something not whitelisted, which is a bit crass.	2019-07-08 13:47:04 +09:00
Topi Miettinen	99894b867f	units: enable ProtectHostname=yes	2019-02-20 10:50:44 +02:00
Lennart Poettering	99cd001d4c	units: also change portabled's syscall filter to a whitelist	2018-11-13 10:38:17 +01:00
Lennart Poettering	61d0578b07	add new portable service framework ... This adds a small service "systemd-portabled" and a matching client "portablectl", which implement the "portable service" concept. The daemon implements the actual operations, is PolicyKit-enabled and is activated on demand with exit-on-idle. Both the daemon and the client are an optional build artifact, enabled by default rhough.	2018-05-24 17:01:57 +02:00