exec: introduce PrivateDevices= switch to provide services with a private /dev
authorLennart Poettering <lennart@poettering.net>
Mon, 20 Jan 2014 18:54:51 +0000 (19:54 +0100)
committerLennart Poettering <lennart@poettering.net>
Mon, 20 Jan 2014 20:28:37 +0000 (21:28 +0100)
commit7f112f50fea585411ea2d493b3582bea77eb4d6e
tree2c670344aa6be9fff8bf4538d2e188bf280ecde3
parent3540c7f88fd4b860d3d6d0e931ddb7cd91bc559a
exec: introduce PrivateDevices= switch to provide services with a private /dev

Similar to PrivateNetwork=, PrivateTmp= introduce PrivateDevices= that
sets up a private /dev with only the API pseudo-devices like /dev/null,
/dev/zero, /dev/random, but not any physical devices in them.
13 files changed:
man/systemd.exec.xml
src/core/dbus-execute.c
src/core/execute.c
src/core/execute.h
src/core/load-fragment-gperf.gperf.m4
src/core/mount-setup.c
src/core/namespace.c
src/core/namespace.h
src/nspawn/nspawn.c
src/shared/def.h
src/shared/dev-setup.c
src/shared/dev-setup.h
src/test/test-ns.c