mirror of
https://github.com/morgan9e/systemd
synced 2026-04-14 00:14:32 +09:00
systemd.exec(5): RestrictAddressFamilies: mention address_families(7)
This commit is contained in:
@@ -2212,7 +2212,9 @@ BindReadOnlyPaths=/var/lib/systemd</programlisting>
|
||||
<listitem><para>Restricts the set of socket address families accessible to the processes of this
|
||||
unit. Takes <literal>none</literal>, or a space-separated list of address family names to
|
||||
allow-list, such as <constant>AF_UNIX</constant>, <constant>AF_INET</constant> or
|
||||
<constant>AF_INET6</constant>. When <literal>none</literal> is specified, then all address
|
||||
<constant>AF_INET6</constant>, see
|
||||
<citerefentry project='man-pages'><refentrytitle>address_families</refentrytitle><manvolnum>7</manvolnum></citerefentry>
|
||||
for all possible options. When <literal>none</literal> is specified, then all address
|
||||
families will be denied. When prefixed with <literal>~</literal> the listed address
|
||||
families will be applied as deny list, otherwise as allow list. Note that this restricts access
|
||||
to the
|
||||
|
||||
Reference in New Issue
Block a user