X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;ds=sidebyside;f=man%2Fsystemd.exec.xml;h=0747d0e1f974265d9f8f39392a4b1e1335fad4fb;hb=9f5ecdb0b11557be41c065f460bb22ab52bb0034;hp=e9af4abd6d565797c3ebef271d91f9cf3d3b04f5;hpb=2134b5ef6b5c944036d051381f4bd7b7e61ef373;p=elogind.git

diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml
index e9af4abd6..0747d0e1f 100644
--- a/man/systemd.exec.xml
+++ b/man/systemd.exec.xml
@@ -1137,6 +1137,35 @@
                                 </para></listitem>
                         </varlistentry>
 
+                        <varlistentry>
+                                <term><varname>SmackProcessLabel=</varname></term>
+
+                                <listitem><para>Takes a
+                                <option>SMACK64</option> security
+                                label as argument. The process
+                                executed by the unit will be started
+                                under this label and SMACK will decide
+                                whether the processes is allowed to
+                                run or not based on it. The process
+                                will continue to run under the label
+                                specified here unless the executable
+                                has its own
+                                <option>SMACK64EXEC</option> label, in
+                                which case the process will transition
+                                to run under that label. When not
+                                specified, the label that systemd is
+                                running under is used. This directive
+                                is ignored if SMACK is
+                                disabled.</para>
+
+                                <para>The value may be prefixed by
+                                <literal>-</literal>, in which case
+                                all errors will be ignored. An empty
+                                value may be specified to unset
+                                previous assignments.</para>
+                                </listitem>
+                        </varlistentry>
+
                         <varlistentry>
                                 <term><varname>IgnoreSIGPIPE=</varname></term>