Harald Hoyer wrote: > Most of them are from the sandbox init script .... NOT from systemd!! Yes, this was not documented in the release notes. It is part of SELinux/pam_namespace usage.