mirror/runc
1
0
Fork 0
mirror of https://github.com/opencontainers/runc.git synced 2026-07-11 06:03:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

merge #4428 into opencontainers/runc:main

Browse Source 
Kir Kolyshkin (2):
  memfd-bind: more specific doc URL
  memfd-bind: fixup systemd unit file and README

LGTMs: rata cyphar
This commit is contained in:
Aleksa Sarai
2024-10-15 15:04:22 +11:00
parent 9112335fb2 4fdd56169d
commit 798ba5cd11
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/cmd/memfd-bind/README.md
+1 -1
View File
@@ -25,7 +25,7 @@ The provided `memfd-bind@.service` file can be used to get systemd to manage
this daemon. You can supply the path like so:
```
% systemctl start memfd-bind@/usr/bin/runc
% systemctl start memfd-bind@$(systemd-escape -p /usr/bin/runc)
```
Thus, there are three ways of protecting against CVE-2019-5736, in order of how
contrib/cmd/memfd-bind/memfd-bind@.service
+4 -4
View File
@@ -1,11 +1,11 @@
[Unit]
Description=Manage memfd-bind of %I
Documentation=https://github.com/opencontainers/runc
Description=Manage memfd-bind of %f
Documentation=https://github.com/opencontainers/runc/blob/main/contrib/cmd/memfd-bind/README.md
[Service]
Type=simple
ExecStart=memfd-bind "%I"
ExecStop=memfd-bind --cleanup "%I"
ExecStart=memfd-bind "%f"
ExecStop=memfd-bind --cleanup "%f"
[Install]
WantedBy=multi-user.target