diff mbox series

[v2,3/5] doc: bitbake-user-manual-metadata: Doc change in default behaviour

Message ID 20260914-landlock_try2-v2-3-0a1bad3579ec@est.tech
State New
Headers show
Series bitbake: Add basic landlock support | expand

Commit Message

David Nyström Sept. 14, 2026, 6:21 p.m. UTC 
Document the change in default tasks behaviour. The "network"
tag is now needed for usage of setcap:ed binaries.

Signed-off-by: David Nyström <david.nystrom@est.tech>
---
 doc/bitbake-user-manual/bitbake-user-manual-metadata.rst | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/doc/bitbake-user-manual/bitbake-user-manual-metadata.rst b/doc/bitbake-user-manual/bitbake-user-manual-metadata.rst
index 9cac793d3..621aab253 100644
--- a/doc/bitbake-user-manual/bitbake-user-manual-metadata.rst
+++ b/doc/bitbake-user-manual/bitbake-user-manual-metadata.rst
@@ -1791,6 +1791,9 @@  functionality of the task:
    shouldn't access the network outside of ``do_fetch`` as it usually
    undermines fetcher source mirroring, image and licence manifests, software
    auditing and supply chain security.
+   Tasks without the network flag will run with PR_SET_NO_NEW_PRIVS,
+   which prevents executables from gaining privileges through
+   file capabilities.
 
 -  ``[noexec]``: When set to "1", marks the task as being empty, with
    no execution required. You can use the ``[noexec]`` flag to set up