[systemd-devel] [PATCH] Document CONFIG_NET_NS as a required kernel option

Colin Guthrie gmane at colin.guthr.ie
Thu Apr 10 02:50:05 PDT 2014


'Twas brillig, and Tollef Fog Heen at 10/04/14 07:53 did gyre and gimble:
> ]] Lennart Poettering 
> 
>> Maybe we shouldn't bother too much with making this one-time. Maybe
>> instead we should print it all the time, but simply at debug log level,
>> so that this isnt too visible...
> 
> It's just when starting services, isn't it?  I think we should log it
> each time at a visible priority, since it can have security
> implications.  If people have a problem with that spamming them, turn
> off PrivateNetwork in their service files or make sure their kernel has
> the support.

Yeah I was about to make the same comment, but instead: +1. Some people
might *think* they are more secure than they really are. Visible logging
on each service start shouldn't be too horrible or spammy IMO.

Col


-- 

Colin Guthrie
gmane(at)colin.guthr.ie
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/



More information about the systemd-devel mailing list