From: Lennart Poettering <lennart@poettering.net>
Date: Thu, 17 Nov 2016 17:10:01 +0000 (+0100)
Subject: namespace: clarify that /proc/apm is obsolete, but leave it blocked
X-Git-Tag: v234~814^2~1
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=aa70f38b5c06d8c43e7d29f6f5f361493ccc0d8f;p=platform%2Fupstream%2Fsystemd.git

namespace: clarify that /proc/apm is obsolete, but leave it blocked
---

diff --git a/src/core/namespace.c b/src/core/namespace.c
index 11d0924..e9ad26b 100644
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -79,7 +79,7 @@ static const BindMount protect_kernel_tunables_table[] = {
         { "/proc/sysrq-trigger", READONLY,     true  },
         { "/proc/latency_stats", READONLY,     true  },
         { "/proc/mtrr",          READONLY,     true  },
-        { "/proc/apm",           READONLY,     true  },
+        { "/proc/apm",           READONLY,     true  }, /* Obsolete API, there's no point in permitting access to this, ever */
         { "/proc/acpi",          READONLY,     true  },
         { "/proc/timer_stats",   READONLY,     true  },
         { "/proc/asound",        READONLY,     true  },