Bug#996876: Re: Re: Bug#996876: XFS excessive logging on bind mounts

[Michael Biebl]

Am 20.10.21 um 14:30 schrieb Michael Biebl:
> I looked into this a bit and I'm pretty sure this is caused by
> https://github.com/systemd/systemd/commit/d8e3c31bd8e307c8defc759424298175aa0f7001 
> 
> 
> which tightened the NoNewPrivileges=yes sandboxing feature a bit more.
> 
> This change is part of v249, so would confirm that you didn't see it 
> with v247

Fun, this feature was initially merged in

https://github.com/systemd/systemd/pull/18348

then reverted as it caused issues with selinux

https://github.com/systemd/systemd/pull/19902

then reapplied with an selinux exception before the v249 release

https://github.com/systemd/systemd/pull/20023


The end result is probably, that users on Fedora/Redhat will not see 
this issue, as they typically have selinux enabled.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20211020/3783d803/attachment.sig>