X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=man%2Fsystemd.socket.xml;h=dad02674672510a1073ee5cc06e9b1e1ec443fc1;hb=158c1e3e0c1e9dd8ebf1b93061e1c81805eac339;hp=238029a2516dc651556cf7396815f5b9e9562109;hpb=3cd761e4df278cdef6fda9d7f50be512d3c1d7ae;p=elogind.git

diff --git a/man/systemd.socket.xml b/man/systemd.socket.xml
index 238029a25..dad026746 100644
--- a/man/systemd.socket.xml
+++ b/man/systemd.socket.xml
@@ -513,7 +513,7 @@
 
                         <varlistentry>
                                 <term><varname>KeepAliveProbes=</varname></term>
-                                <listitem><para>Takes interger as argument. It's the number of unacknowledged probes to
+                                <listitem><para>Takes integer as argument. It's the number of unacknowledged probes to
                                 send before considering the connection dead and notifying the application layer.
                                 This controls the TCP_KEEPCNT socket option (see
                                 <citerefentry><refentrytitle>socket</refentrytitle><manvolnum>7</manvolnum></citerefentry>
@@ -675,6 +675,32 @@
                                 for details.</para></listitem>
                         </varlistentry>
 
+                        <varlistentry>
+                          <term><varname>SELinuxContextFromNet=</varname></term>
+                                 <listitem><para>Takes a boolean
+                                 argument. When true systemd will attempt
+                                 to figure out the SELinux label used
+                                 for the instantiated service from the
+                                 information handed by the peer over the
+                                 network. Note that only the security
+                                 level is used from the information
+                                 provided by the peer. Other parts of
+                                 the resulting SELinux context originate
+                                 from either the target binary that is
+                                 effectively triggered by socket unit
+                                 are taken from the value of the
+                                 <varname>SELinuxContext=</varname>
+                                 option.This configuration option only
+                                 affects sockets with
+                                 <varname>Accept=</varname> mode set to
+                                 <literal>true</literal>. Also note that
+                                 this option is useful only when
+                                 MLS/MCS SELinux policy is
+                                 deployed. Defaults to
+                                 <literal>false</literal>.
+                                 </para></listitem>
+                        </varlistentry>
+
                         <varlistentry>
                                 <term><varname>PipeSize=</varname></term>
                                 <listitem><para>Takes a size in
@@ -889,7 +915,7 @@
                   <title>See Also</title>
                   <para>
                           <citerefentry><refentrytitle>systemd</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
-                          <citerefentry><refentrytitle>systemctl</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
+                          <citerefentry><refentrytitle>systemctl</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
                           <citerefentry><refentrytitle>systemd.unit</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
                           <citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry>,
                           <citerefentry><refentrytitle>systemd.kill</refentrytitle><manvolnum>5</manvolnum></citerefentry>,