File tree Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Original file line number Diff line number Diff line change @@ -1556,7 +1556,12 @@ StateDirectory=aaa/bbb ccc</programlisting>
15561556 permit this. Nest <varname >ReadWritePaths=</varname > inside of <varname >ReadOnlyPaths=</varname > in
15571557 order to provide writable subdirectories within read-only directories. Use
15581558 <varname >ReadWritePaths=</varname > in order to allow-list specific paths for write access if
1559- <varname >ProtectSystem=strict</varname > is used.</para >
1559+ <varname >ProtectSystem=strict</varname > is used. Note that <varname >ReadWritePaths=</varname > cannot
1560+ be used to gain write access to a file system whose superblock is mounted read-only. On Linux, for
1561+ each mount point write access is granted only if the mount point itself <emphasis >and</emphasis > the
1562+ file system superblock backing it are not marked read-only. <varname >ReadWritePaths=</varname > only
1563+ controls the former, not the latter, hence a read-only file system superblock remains
1564+ protected.</para >
15601565
15611566 <para >Paths listed in <varname >InaccessiblePaths=</varname > will be made inaccessible for processes inside
15621567 the namespace along with everything below them in the file system hierarchy. This may be more restrictive than
You can’t perform that action at this time.
0 commit comments