On Tue, Jan 22, 2019 at 3:46 AM Reindl Harald <[email protected]>
wrote:

>
> "ProtectSystem=full" with the setup below just works, "su -" in a
> konsole within the graphical session don't gain write permissions
>
> Tasks: 4
> why?
>
> shouldn't everything started after the graphical login interherit any
> settings from teh display-manager service and run under it's cgroup?
>

No, one of the first things done during login is to create a new logind
session with associated cgroup (under user.slice) and move your process
into it.

-- 
Mantas Mikulėnas
_______________________________________________
systemd-devel mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to