From: Yu Watanabe <watanabe.yu+github@gmail.com>
Date: Tue, 19 Dec 2017 03:48:54 +0000 (+0900)
Subject: man: LockPersonality= implies NoNewPrivileges=
X-Git-Tag: v237~198^2~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=69b528832a8ee3606bf8f30164c681a0872f7a2a;p=platform%2Fupstream%2Fsystemd.git

man: LockPersonality= implies NoNewPrivileges=
---

diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml
index 3d81e45..b0135e4 100644
--- a/man/systemd.exec.xml
+++ b/man/systemd.exec.xml
@@ -381,7 +381,8 @@ CapabilityBoundingSet=~CAP_B CAP_C</programlisting>
         <varname>SystemCallArchitectures=</varname>, <varname>RestrictAddressFamilies=</varname>,
         <varname>RestrictNamespaces=</varname>, <varname>PrivateDevices=</varname>,
         <varname>ProtectKernelTunables=</varname>, <varname>ProtectKernelModules=</varname>,
-        <varname>MemoryDenyWriteExecute=</varname>, or <varname>RestrictRealtime=</varname> are specified. Also see
+        <varname>MemoryDenyWriteExecute=</varname>, <varname>RestrictRealtime=</varname>, or
+        <varname>LockPersonality=</varname> are specified. Also see
         <ulink url="https://www.kernel.org/doc/html/latest/userspace-api/no_new_privs.html">No New Privileges
         Flag</ulink>.  </para></listitem>
       </varlistentry>