X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;ds=sidebyside;f=man%2Fsystemd.exec.xml;h=b9a37da38e061c3874caf61f287e1ac17fbea2d0;hb=bbc732830876ce75a95c57ccf8677f74e4569efc;hp=7b4f7e39c3c2e5427d9d75ccd8aa353b82f81c53;hpb=9a66640832d103f906c2ef609a1d19d43fc542f6;p=elogind.git diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index 7b4f7e39c..b9a37da38 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -629,6 +629,18 @@ for details. + + ControlGroupModify= + Takes a boolean + argument. If true, the control groups + created for this unit will be owned by + ther user specified with + User= (and the + configured group), and he can create + subgroups as well as add processes to + the group. + + CapabilityBoundingSet= @@ -638,7 +650,7 @@ executed process. See capabilities7 for details. Takes a whitespace - seperated list of capability names as + separated list of capability names as read by cap_from_name3. Capabilities listed will be included @@ -646,7 +658,7 @@ removed. If the list of capabilities is prefixed with ~ all but the listed capabilities will be included, the - effect of this assignment + effect of the assignment inverted. Note that this option does not actually set or unset any capabilities in the effective, @@ -715,7 +727,7 @@ path for this unit is implied. This option may be used to place executed processes in arbitrary groups in - arbitrary hierachies -- which can be + arbitrary hierarchies -- which can be configured externally with additional execution limits. By default systemd will place all executed processes in separate per-unit control @@ -753,7 +765,7 @@ usual file access controls would permit this. Directories listed in InaccessibleDirectories= - will be made inaccesible for processes + will be made inaccessible for processes inside the namespace. Note that restricting access with these options does not extend to submounts of a