X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fsystemd.exec.xml;h=90d36f9b576e3dcf5b4020b412f8951936569c75;hp=f1bcf9b7bd645f2931fe96699db04ce833c4d947;hb=f1660f96f59dad860d39f148c3a747050d112763;hpb=45aee6d67ad62a651720f22e67273a692014f948 diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index f1bcf9b7b..90d36f9b5 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -908,8 +908,11 @@ /dev/sda. This is useful to securely turn off physical device access by the executed - process. Defaults to - false. + process. Defaults to false. Note that + enabling this option implies that + CAP_MKNOD is + removed from the capability bounding + set for the unit.