The Vulnerability History Project

core: ProtectHostname= feature

      Let services use a private UTS namespace. In addition, a seccomp filter is
installed on set{host,domain}name and a ro bind mounts on
/proc/sys/kernel/{host,domain}name.

by Dolores the Pug 2019-02-08 17:25:00 UTC

commit aecd5ac6218f6291186b530b89cf2e97333fffc0

systemd VCC CVE-2019-3843

man/systemd.exec.xml

-11

src/core/dbus-execute.c

-4

src/core/execute.c

+3 -24

src/core/execute.h

-1

src/core/load-fragment-gperf.gperf.m4

-1

src/core/namespace.c

-12

src/core/namespace.h

-1

src/shared/bus-unit-util.c

+1 -1

src/shared/seccomp-util.c

-37

src/shared/seccomp-util.h

-1

expand_less