From: Nicolas Braud-Santoni Date: Sun, 17 Apr 2016 12:22:17 +0000 (+0200) Subject: man: systemd.exec: Clarify InaccessibleDirectories (#3048) (#3048) X-Git-Tag: v231~444 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=b50a16af8e3c353703d55f117077fcf60b8081e8;p=platform%2Fupstream%2Fsystemd.git man: systemd.exec: Clarify InaccessibleDirectories (#3048) (#3048) --- diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 3e1a2cb..4ed62db 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -859,9 +859,12 @@ reading only, writing will be refused even if the usual file access controls would permit this. Directories listed in InaccessibleDirectories= will be made - inaccessible for processes inside the namespace. Note that - restricting access with these options does not extend to - submounts of a directory that are created later on. These + inaccessible for processes inside the namespace, and may not + countain any other mountpoints, including those specified by + ReadWriteDirectories= or + ReadOnlyDirectories=. + Note that restricting access with these options does not extend + to submounts of a directory that are created later on. These options may be specified more than once, in which case all directories listed will have limited access from within the namespace. If the empty string is assigned to this option, the