summaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorMauricio Vásquez <mauricio@kinvolk.io>2021-07-13 11:03:31 -0500
committerMauricio Vásquez <mauricio@kinvolk.io>2021-08-19 07:25:01 -0500
commit43689840a2d588fbfd2d01be36e5a4465f276dcb (patch)
treebb589121aea9b29c3e0b33e38809f13da375abb0 /README
parent7e959a73af99292179ff82e81c6dd4a322e7bb5e (diff)
downloadsystemd-43689840a2d588fbfd2d01be36e5a4465f276dcb.tar.gz
README: add requirements for RestrictNetworkInterfaces=
Signed-off-by: Mauricio Vásquez <mauricio@kinvolk.io>
Diffstat (limited to 'README')
-rw-r--r--README4
1 files changed, 3 insertions, 1 deletions
diff --git a/README b/README
index a8f23a0d5b..11487420f7 100644
--- a/README
+++ b/README
@@ -40,6 +40,7 @@ REQUIREMENTS:
Linux kernel >= 4.17 for cgroup-bpf socket address hooks
Linux kernel >= 5.3 for bounded-loops in BPF program
Linux kernel >= 5.4 for signed Verity images support
+ Linux kernel >= 5.7 for BPF links
Kernel Config Options:
CONFIG_DEVTMPFS
@@ -108,7 +109,8 @@ REQUIREMENTS:
CONFIG_HAVE_EBPF_JIT
CONFIG_CGROUP_BPF
- Required for SocketBind{Allow|Deny}= in resource control unit settings
+ Required for SocketBind{Allow|Deny}=, RestrictNetworkInterfaces= in
+ resource control unit settings
CONFIG_BPF
CONFIG_BPF_SYSCALL
CONFIG_BPF_JIT