catborise 69ddbbdc94 feat(console): the console daemons' systemd units run sandboxed ... webvirt-novncd and webvirt-socketiod get read-only system directories, no access to /home and /root, no new privileges, no kernel tunables, modules or cgroups, and only Unix, IPv4 and IPv6 sockets; socketiod also a private /tmp. novncd keeps the shared /tmp, where a VM's VNC Unix socket may be. They keep what they need: a pty and its console worker, TCP and Unix sockets, ssh with its configuration, writes under /srv/webvirtcloud and the service user's ~/.ssh. The units installed by the update steps bring this.		2026-10-26 23:52:29 +03:00
..
webvirt-cloud.service	build: systemd runs the panel on hosts instead of supervisor	2026-10-17 23:18:26 +03:00
webvirt-gstfsd.service	build: computes run gstfsd as a systemd unit instead of under supervisor	2026-10-17 23:42:41 +03:00
webvirt-novncd.service	feat(console): the console daemons' systemd units run sandboxed	2026-10-26 23:52:29 +03:00
webvirt-socketiod.service	feat(console): the console daemons' systemd units run sandboxed	2026-10-26 23:52:29 +03:00
webvirt-worker.service	build: systemd runs the panel on hosts instead of supervisor	2026-10-17 23:18:26 +03:00