fixup! fixup! core: introduce BindJournalSockets=

systemd · Apr 26, 2024 · 9705498 · 9705498
1 parent 77d6537
commit 9705498
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/core/exec-invoke.c b/src/core/exec-invoke.c
@@ -3251,7 +3251,7 @@ static int apply_mount_namespace(
                 .private_ipc = needs_sandboxing && exec_needs_ipc_namespace(context),
 
                 .mount_apivfs = needs_sandboxing && exec_context_get_effective_mount_apivfs(context),
-                .bind_journal_sockets = exec_context_get_effective_bind_journal_sockets(context),
+                .bind_journal_sockets = needs_sandboxing && exec_context_get_effective_bind_journal_sockets(context),
 
                 /* If NNP is on, we can turn on MS_NOSUID, since it won't have any effect anymore. */
                 .mount_nosuid = needs_sandboxing && context->no_new_privileges && !mac_selinux_use(),