chiark / gitweb /
man: nspawn fixes
authorLennart Poettering <lennart@poettering.net>
Tue, 2 Aug 2011 02:55:10 +0000 (04:55 +0200)
committerLennart Poettering <lennart@poettering.net>
Tue, 2 Aug 2011 02:55:10 +0000 (04:55 +0200)
man/systemd-nspawn.xml

index 8b37519ad5510c1e87aa659cb621c32e4a59e2d0..490c6c2cd5cf1bb31bfd225f3883ce46055c008d 100644 (file)
                 to various kernel interfaces in the container to
                 read-only, such as <filename>/sys</filename>,
                 <filename>/proc/sys</filename> or
-                <filename>/selinux</filename>. Network interfaces and
-                the system clock may not be changed from within the
-                container. Device nodes may not be created. The host
-                system cannot be rebooted and kernel modules may not
-                be loaded from within the container.</para>
+                <filename>/sys/fs/selinux</filename>. Network
+                interfaces and the system clock may not be changed
+                from within the container. Device nodes may not be
+                created. The host system cannot be rebooted and kernel
+                modules may not be loaded from within the
+                container.</para>
 
                 <para>Note that even though these security precautions
                 are taken <command>systemd-nspawn</command> is not
 
                         <varlistentry>
                                 <term><option>--user=</option></term>
-                                <term><option>--u</option></term>
+                                <term><option>-u</option></term>
 
                                 <listitem><para>Run the command
                                 under specified user, create home