File tree Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Expand file tree Collapse file tree 1 file changed +6
-1
lines changed Original file line number Diff line number Diff line change @@ -1496,7 +1496,12 @@ StateDirectory=aaa/bbb ccc</programlisting>
14961496 permit this. Nest <varname >ReadWritePaths=</varname > inside of <varname >ReadOnlyPaths=</varname > in
14971497 order to provide writable subdirectories within read-only directories. Use
14981498 <varname >ReadWritePaths=</varname > in order to allow-list specific paths for write access if
1499- <varname >ProtectSystem=strict</varname > is used.</para >
1499+ <varname >ProtectSystem=strict</varname > is used. Note that <varname >ReadWritePaths=</varname > cannot
1500+ be used to gain write access to a file system whose superblock is mounted read-only. On Linux, for
1501+ each mount point write access is granted only if the mount point itself <emphasis >and</emphasis > the
1502+ file system superblock backing it are not marked read-only. <varname >ReadWritePaths=</varname > only
1503+ controls the former, not the latter, hence a read-only file system superblock remains
1504+ protected.</para >
15001505
15011506 <para >Paths listed in <varname >InaccessiblePaths=</varname > will be made inaccessible for processes inside
15021507 the namespace along with everything below them in the file system hierarchy. This may be more restrictive than
You can’t perform that action at this time.
0 commit comments