mirror of
https://github.com/systemd/systemd
synced 2024-09-06 00:41:36 +00:00
NEWS: add a comment about udev's MemoryDenyWriteExecute= setting (#5414)
Apparently if people are adventurous enought to run Go programs in udev rules they might run into problems with MemoryDenyWriteExecute=. I am pretty sure the best way out is for the toolchain generating programs incompatible with W^X to be fixed, but this still deserves documentation. This was forgotten for the 232 release, hence add it now, retroactively. See: #5400
This commit is contained in:
parent
c22569eeea
commit
05f426d2b8
7
NEWS
7
NEWS
|
@ -357,6 +357,13 @@ CHANGES WITH 233 in spe
|
|||
|
||||
CHANGES WITH 232:
|
||||
|
||||
* udev now runs with MemoryDenyWriteExecute=, RestrictRealtime= and
|
||||
RestrictAddressFamilies= enabled. These sandboxing options should
|
||||
generally be compatible with the various external udev call-out
|
||||
binaries we are aware of, however there may be exceptions, in
|
||||
particular when exotic languages for these call-outs are used. In
|
||||
this case, consider turning off these settings locally.
|
||||
|
||||
* The new RemoveIPC= option can be used to remove IPC objects owned by
|
||||
the user or group of a service when that service exits.
|
||||
|
||||
|
|
Loading…
Reference in a new issue