summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-11-01seccomp: allow specifying arm64, mips, ppc (#4491)Zbigniew Jędrzejewski-Szmek
"Secondary arch" table for mips is entirely speculative…
2016-11-01Recognise Lustre as a remote file system (#4530)Brian J. Murrell
Lustre is also a remote file system that wants the network to be up before it is mounted.
2016-10-31test-compression: allow the file to compress to be specifiedZbigniew Jędrzejewski-Szmek
I'm seeing strange decompression errors with lz4, which might be content-dependent. Extend test-compression to allow testing specific content. (Edit: PEBKAC: lzcat and lz4cat are not the same beast. Nevertheless, the test might still be useful in the future.)
2016-10-31tidy upLuke Shumaker
2016-10-31man: fix typos (#4527)Jakub Wilk
2016-10-30Implement VeraCrypt volume handling in crypttab (#4501)George Hilliard
This introduces a new option, `tcrypt-veracrypt`, that sets the corresponding VeraCrypt flag in the flags passed to cryptsetup.
2016-10-30tests: clarify test_path_startswith return value (#4508)Zbigniew Jędrzejewski-Szmek
A pendant for #4481.
2016-10-29Merge pull request #4520 from lucaswerkmeister/systemd-escape-manZbigniew Jędrzejewski-Szmek
systemd-escape manpage improvements
2016-10-30man: make systemd-escape examples more consistentLucas Werkmeister
The first example wasn't phrased with "To ..." as the other three are, and the last example was lacking the colon.
2016-10-30man: add missing periodLucas Werkmeister
2016-10-30man: improve systemd-escape --path descriptionLucas Werkmeister
The option does more than the documentation gave it credit for.
2016-10-28man: add a note that FDSTORE=1 requires epoll-compatible fdsZbigniew Jędrzejewski-Szmek
Let's say that this was not obvious from our man page.
2016-10-28pid1: nicely log when doing operation on stored fdsZbigniew Jędrzejewski-Szmek
Should help with debugging #4408.
2016-10-28pid1: only log about added fd if it was really addedZbigniew Jędrzejewski-Szmek
If it was a duplicate, log nothing.
2016-10-28.gitignore: ignore precompiled GCC headers (#4516)Daniel Mack
Not sure since when this is the default behavior, but my local tree is full of such files. Let's ignore them for clarity.
2016-10-28Merge pull request #4495 from topimiettinen/block-shmat-execDjalal Harouni
seccomp: also block shmat(..., SHM_EXEC) for MemoryDenyWriteExecute
2016-10-28Merge pull request #4458 from keszybz/man-nonewprivilegesMartin Pitt
Document NoNewPrivileges default value
2016-10-28udev: allow substitutions for SECLABEL key (#4505)Michal Sekletar
2016-10-27systemctl: warn when cat shows changed unit files (#4493)Lucas Werkmeister
Suggested by @keszybz in #4488.
2016-10-27Merge pull request #4485 from endocode/djalal/portable-branch-v1Zbigniew Jędrzejewski-Szmek
core: improve mount namespace and working directory setup
2016-10-27Merge pull request #4442 from keszybz/detect-virt-usernsEvgeny Vereshchagin
detect-virt: add --private-users switch to check if a userns is active; add Condition=private-users
2016-10-27core: make unit argument const for apply seccomp functionsDjalal Harouni
2016-10-27core: lets apply working directory just after mount namespacesDjalal Harouni
This makes applying groups after applying the working directory, this may allow some flexibility but at same it is not a big deal since we don't execute or do anything between applying working directory and droping groups.
2016-10-27core: get the working directory value inside apply_working_directory()Djalal Harouni
Improve apply_working_directory() and lets get the current working directory inside of it.
2016-10-27core: move apply working directory code into its own apply_working_directory()Djalal Harouni
2016-10-27core: move the code that setups namespaces on its own functionDjalal Harouni
2016-10-27Makefile.am: reclassify a few sectionsLuke Shumaker
2016-10-26fixityLuke Shumaker
2016-10-26add missing MakefilesLuke Shumaker
2016-10-26Better Makefile splittingLuke Shumaker
2016-10-26libmachine-core/src MakefileLuke Shumaker
2016-10-26tools/notsd-move: oops: don't invoke the editor, for real this timeLuke Shumaker
2016-10-26have libbasic gperf headers be privateLuke Shumaker
2016-10-26add missing stub MakefilesLuke Shumaker
2016-10-26tools/notsd-move: avoid dangling empty directoriesLuke Shumaker
2016-10-26tools/notsd-move: bus-util locationLuke Shumaker
2016-10-26tools/notsd-fixup--includes: fix mucking with typedefsLuke Shumaker
2016-10-26tools/notsd-fixup--includes: Fix a variable reuse bug.Luke Shumaker
2016-10-26tidyLuke Shumaker
2016-10-26tools/notsd-fixup: Split the makefile pass into a separate executable.Luke Shumaker
This avoids using bash read(1) to loop over the files, as we've already gotten decent speedups from avoiding bash read(1). This means we've got at least two more fork/exec's because of xargs, but it's probably worth it. But that's kind of premature-optimization; the time improvement here is probably just random noise. But, I think this makes the code more maintainable/manageable too, so I'm committing it.
2016-10-26tools/notsd-fixup: Merge the pre-includes pass the includes pass.Luke Shumaker
This shaves off a decent chunk of time, and simplifies the code.
2016-10-26hwdb: fix error check of wrong variable (#4499)Thomas H. P. Andersen
We updated 'fn' but checked 'v' instead. From 698c5a17 Spotted with PVS
2016-10-26tools/notsd-fixup--includes: Allow passing multiple arguments.Luke Shumaker
This substantially speeds things up because it doesn't have to set up and tear down the Python runtime for every single C file now.
2016-10-26tools/notsd-fixup--includes: port from bash to python for speedLuke Shumaker
This shaves off a decent chunk of time because Bash read(1) is slow because it can't buffer and has to read(2) one byte at a time.
2016-10-26tools/notsd-move: avoid invoking the editor for the merge commitLuke Shumaker
2016-10-26tools/notsd-fixup--includes: clean up, add cachingLuke Shumaker
So now it should cache calls to `cpp` or filesystem checks, which are comparatively expensive.
2016-10-26Merge pull request #4448 from msoltyspl/vcfixZbigniew Jędrzejewski-Szmek
Fix some formatting details in the merge.
2016-10-26units: disable /dev/hugepages in private user namespacesZbigniew Jędrzejewski-Szmek
The mount fails, even though CAP_SYS_ADMIN is granted.
2016-10-26condition: simplify condition_test_virtualizationZbigniew Jędrzejewski-Szmek
Rewrite the function to be slightly simpler. In particular, if a specific match is found (like ConditionVirtualization=yes), simply return an answer immediately, instead of relying that "yes" will not be matched by any of the virtualization names below. No functional change.
2016-10-26test-tables: test ConditionVirtualizationZbigniew Jędrzejewski-Szmek
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-10-03 07:10:28 +0000