summaryrefslogtreecommitdiff
path: root/man/systemd.resource-control.xml
diff options
context:
space:
mode:
authorZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>2021-09-27 12:09:48 +0200
committerGitHub <noreply@github.com>2021-09-27 12:09:48 +0200
commit66a0e222937e145a1722640fab413608f565cf33 (patch)
treee20f170b55c5c4508ade3913d19005d851e8bef2 /man/systemd.resource-control.xml
parent75a36d757548ff6e1754eee732f750e20c44f6aa (diff)
parentd8e1613ed2b657f3ac6d490ebad829c292cf2365 (diff)
downloadsystemd-66a0e222937e145a1722640fab413608f565cf33.tar.gz
Merge pull request #20849 from keszybz/man-page-tags-and-links
Add license tags to doc pages, fixups and more internal links in man pages
Diffstat (limited to 'man/systemd.resource-control.xml')
-rw-r--r--man/systemd.resource-control.xml5
1 files changed, 5 insertions, 0 deletions
diff --git a/man/systemd.resource-control.xml b/man/systemd.resource-control.xml
index ea728dff33..b21f8575a0 100644
--- a/man/systemd.resource-control.xml
+++ b/man/systemd.resource-control.xml
@@ -928,6 +928,11 @@ RestrictNetworkInterfaces=~eth1</programlisting>
url="https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v1/devices.html">Device Whitelist Controller</ulink>.
In the unified cgroup hierarchy this functionality is implemented using eBPF filtering.</para>
+ <para>When access to <emphasis>all</emphasis> physical devices should be disallowed,
+ <varname>PrivateDevices=</varname> may be used instead. See
+ <citerefentry><refentrytitle>systemd.exec</refentrytitle><manvolnum>5</manvolnum></citerefentry>.
+ </para>
+
<para>The device node specifier is either a path to a device node in the file system, starting with
<filename>/dev/</filename>, or a string starting with either <literal>char-</literal> or
<literal>block-</literal> followed by a device group name, as listed in