diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2014-10-03 21:06:52 -0400 |
|---|---|---|
| committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2014-10-03 21:06:52 -0400 |
| commit | e060073a8f05cfdfad621b1bb59abe944b17d5f9 (patch) | |
| tree | 758eed18e974a8a85a7024bb4034c10a8accf9f2 | |
| parent | cef3566998fcae6936d781e678c309950a8a5787 (diff) | |
| download | systemd-e060073a8f05cfdfad621b1bb59abe944b17d5f9.tar.gz | |
man: say that SecureBits= are space separated
| -rw-r--r-- | man/systemd.exec.xml | 20 |
1 files changed, 11 insertions, 9 deletions
diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 6d0113f5cc..939983fb7e 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -776,20 +776,22 @@ <varlistentry> <term><varname>SecureBits=</varname></term> <listitem><para>Controls the secure - bits set for the executed process. See - <citerefentry project='man-pages'><refentrytitle>capabilities</refentrytitle><manvolnum>7</manvolnum></citerefentry> - for details. Takes a list of strings: + bits set for the executed process. + Takes a space-separated combination of + options from the following list: <option>keep-caps</option>, <option>keep-caps-locked</option>, <option>no-setuid-fixup</option>, <option>no-setuid-fixup-locked</option>, - <option>noroot</option> and/or + <option>noroot</option>, and <option>noroot-locked</option>. This option may appear more than once in - which case the secure bits are - ORed. If the empty string is assigned - to this option, the bits are reset to - 0.</para></listitem> + which case the secure bits are ORed. + If the empty string is assigned to + this option, the bits are reset to 0. + See <citerefentry + project='man-pages'><refentrytitle>capabilities</refentrytitle><manvolnum>7</manvolnum></citerefentry> + for details.</para></listitem> </varlistentry> <varlistentry> @@ -806,7 +808,7 @@ attached to the executed file. Due to that <varname>CapabilityBoundingSet=</varname> - is probably the much more useful + is probably a much more useful setting.</para></listitem> </varlistentry> |