diff options
Diffstat (limited to 'tags/k')
| -rw-r--r-- | tags/k/kill-mode-none.tag | 13 | ||||
| -rw-r--r-- | tags/k/killall-is-dangerous.tag | 9 |
2 files changed, 22 insertions, 0 deletions
diff --git a/tags/k/kill-mode-none.tag b/tags/k/kill-mode-none.tag new file mode 100644 index 0000000..e182905 --- /dev/null +++ b/tags/k/kill-mode-none.tag @@ -0,0 +1,13 @@ +Tag: kill-mode-none +Severity: warning +Check: systemd +Explanation: The named systemd unit is configured to use <code>KillMode=none</code>. + That is unsafe because it disables systemd's process lifecycle management for the + service. + . + Please update your service to use a safer <code>KillMode</code>, such as + <code>mixed</code> or <code>control-group</code>. + . + Support for <code>KillMode=none</code> is deprecated and will eventually be removed. +See-also: + systemd.kill(5) diff --git a/tags/k/killall-is-dangerous.tag b/tags/k/killall-is-dangerous.tag new file mode 100644 index 0000000..05b8a1d --- /dev/null +++ b/tags/k/killall-is-dangerous.tag @@ -0,0 +1,9 @@ +Tag: killall-is-dangerous +Severity: warning +Check: maintainer-scripts/killall +Explanation: The maintainer script seems to call <code>killall</code>. Since the + program terminates processes by name, it may accidentally affect unrelated + processes. + . + Most uses of <code>killall</code> should use <code>invoke-rc.d</code> + instead. |