diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index ac17ab65a4..a955f767e4 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -1433,6 +1433,10 @@ CapabilityBoundingSet=~CAP_B CAP_C set. This setting cannot ensure protection in all cases. In general it has the same limitations as ReadOnlyPaths=, see below. Defaults to off. + Note that if ProtectSystem= is set to strict and + PrivateTmp= is enabled, then /tmp/ and + /var/tmp/ will be writable. +