nspawn: prohibit access to the kernel log buffer by default
authorLennart Poettering <lennart@poettering.net>
Thu, 21 May 2015 18:48:39 +0000 (20:48 +0200)
committerLennart Poettering <lennart@poettering.net>
Thu, 21 May 2015 18:49:24 +0000 (20:49 +0200)
commit5ba7a26847846322740c02b9b469f42ea4c3f105
tree4377ddf8124b0b6adf303149ff2b04b41fee4fed
parent4c6d20dece1da97c31cd88ddebc007bf33204b82
nspawn: prohibit access to the kernel log buffer by default

Unless CAP_SYSLOG is explicitly passed block all access to kmg
src/nspawn/nspawn.c