[systemd-devel] grant users access to certain services only

Dominick Grift dac.override at gmail.com
Fri Aug 21 02:57:20 PDT 2015


Made a demo because i was bored: https://www.youtube.com/watch?v=KrK5a7D77l0 

In practice though this is probably not an option for you. It is very
expensive. however it is (optionally) supported by systemd and i just wanted to counter
the misinformation.

i think it kind of sucks that systemctl --user list-units can be used to
determine who is currently logged in. ( it shows active mount units for
XDG_RUNTIME_DIR and since those have UID as name you can see who is
logged in.

also unpriv users can get status of system services by default?

-- 
02DFF788
4D30 903A 1CF3 B756 FB48  1514 3148 83A2 02DF F788
http://keys.gnupg.net/pks/lookup?op=vindex&search=0x314883A202DFF788
Dominick Grift


More information about the systemd-devel mailing list