mirror of
https://github.com/systemd/systemd.git
synced 2024-11-01 17:51:22 +03:00
fa229d0928
We really don't want these in containers as they provide a too lowlevel look on the system. Conditionalize them with CAP_SYS_RAWIO since that's required to access /proc/kcore, /dev/kmem and similar, which feel similar in style. Also, npsawn containers lack that capability.
21 lines
662 B
SYSTEMD
21 lines
662 B
SYSTEMD
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=Debug File System
|
|
Documentation=https://www.kernel.org/doc/Documentation/filesystems/debugfs.txt
|
|
Documentation=http://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
|
|
DefaultDependencies=no
|
|
ConditionPathExists=/sys/kernel/debug
|
|
ConditionCapability=CAP_SYS_RAWIO
|
|
Before=sysinit.target
|
|
|
|
[Mount]
|
|
What=debugfs
|
|
Where=/sys/kernel/debug
|
|
Type=debugfs
|