On Tue, Sep 10, 2024 at 5:51 PM Divine Eguzouwa
wrote:
> Assuming: run0 (and all of systemd for that matter) security works by
> sandboxing a service's "cgroup-namespace environment" (i.e., through
> User=/Group=, and/or NoNewPrivilages=, and/or etc.) and directly
> executing the given command th
Assuming: run0 (and all of systemd for that matter) security works by
sandboxing a service's "cgroup-namespace environment" (i.e., through
User=/Group=, and/or NoNewPrivilages=, and/or etc.) and directly executing
the given command therin...
I have a chain of services that executes a process belon
