From ef9262d0d178dd72488559ad88f2ce8980e5e6d7 Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Mon, 22 Apr 2024 13:06:48 +0200
Subject: [PATCH] man: be explicit that we don't proxy SO_PEER*, SCM_RIGHTS and
 co.

Fixes: #22744
---
 man/systemd-socket-proxyd.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/man/systemd-socket-proxyd.xml b/man/systemd-socket-proxyd.xml
index 829cc958051..dde6d888ada 100644
--- a/man/systemd-socket-proxyd.xml
+++ b/man/systemd-socket-proxyd.xml
@@ -53,6 +53,11 @@
     <literal>Accept=no</literal> and an event-driven
     design that scales better with the number of
     connections.</para>
+
+    <para>Note that <command>systemd-socket-proxyd</command> will not forward socket side channel
+    information, i.e. will not forward <constant>SCM_RIGHTS</constant>, <constant>SCM_CREDENTIALS</constant>,
+    <constant>SCM_SECURITY</constant>, <constant>SO_PEERCRED</constant>, <constant>SO_PEERPIDFD</constant>,
+    <constant>SO_PEERSEC</constant>, <constant>SO_PEERGROUPS</constant> and similar.</para>
   </refsect1>
   <refsect1>
     <title>Options</title>