mirror of
https://github.com/systemd/systemd
synced 2024-10-07 00:30:59 +00:00
logind: add a comment with a reminder why we don't use ProtrectProc=
Follow-up for https://github.com/systemd/systemd/pull/21785
This commit is contained in:
parent
60c5878dd4
commit
ba679b8d56
|
@ -37,6 +37,7 @@ LockPersonality=yes
|
||||||
MemoryDenyWriteExecute=yes
|
MemoryDenyWriteExecute=yes
|
||||||
NoNewPrivileges=yes
|
NoNewPrivileges=yes
|
||||||
PrivateTmp=yes
|
PrivateTmp=yes
|
||||||
|
# We don't use ProtectProc= since we need to look for usernames and tty for wall messages
|
||||||
ProtectClock=yes
|
ProtectClock=yes
|
||||||
ProtectControlGroups=yes
|
ProtectControlGroups=yes
|
||||||
ProtectHome=yes
|
ProtectHome=yes
|
||||||
|
|
Loading…
Reference in a new issue