X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=man%2Fsystemd.exec.xml;h=e82e1f59f0ec87d6fa4c56849175558c6177aef8;hp=01356e4c459ac9b1b01874cb313331a0f6d3c53e;hb=e9642be2cce7f5e90406980092a6f71f504a16af;hpb=57183d117a1d6a96d71ce99d648beb0d2b36228d diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 01356e4c4..e82e1f59f 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -248,7 +248,7 @@ Controls the CPU affinity of the executed processes. Takes a space-separated - list of CPU indexes. This option may + list of CPU indices. This option may be specified more than once in which case the specificed CPU affinity masks are merged. If the empty string is @@ -472,9 +472,9 @@ StandardError= Controls where file - descriptor 2 (STDERR) of the executed - processes is connected to. The - available options are identical to + descriptor 2 (standard error) of the + executed processes is connected to. + The available options are identical to those of StandardOutput=, with one exception: if set to @@ -491,8 +491,8 @@ TTYPath= Sets the terminal - device node to use if standard input, - output or stderr are connected to a + device node to use if standard input, output, + or error are connected to a TTY (see above). Defaults to /dev/console. @@ -1033,7 +1033,7 @@ If you specify both types of this option (i.e. whitelisting and - blacklisting) the first encountered + blacklisting), the first encountered will take precedence and will dictate the default action (termination or approval of a system call). Then the @@ -1041,23 +1041,15 @@ add or delete the listed system calls from the set of the filtered system calls, depending of its type and the - default action (e.g. You have started + default action. (For example, if you have started with a whitelisting of read and - write and right + write, and right after it add a blacklisting of write, then write will be - removed from the set). + removed from the set.) - - Note that setting - SystemCallFilter= - implies a - SystemCallArchitectures= - setting of native - (see below), unless that option is - configured otherwise. @@ -1075,7 +1067,7 @@ EACCES or EUCLEAN. When this setting is not used, or when the empty - string is assigned the process will be + string is assigned, the process will be terminated immediately when the filter is triggered. @@ -1099,8 +1091,8 @@ unit. This is an effective way to disable compatibility with non-native architectures for processes, for - example to prohibit execution of 32bit - x86 binaries on 64bit x86-64 + example to prohibit execution of + 32-bit x86 binaries on 64-bit x86-64 systems. The special native identifier implicitly maps to the native @@ -1110,16 +1102,10 @@ that setting this option to a non-empty list implies that native is included - too. By default this option is set to + too. By default, this option is set to the empty list, i.e. no architecture - system call filtering is applied. Note - that configuring a system call filter - with - SystemCallFilter= - (above) implies a - native architecture - list, unless configured - otherwise. + system call filtering is + applied.