summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-03-20Make PrivateTmp dirs also inaccessible from the outsideZbigniew Jędrzejewski-Szmek
Currently, PrivateTmp=yes means that the service cannot see the /tmp shared by rest of the system and is isolated from other services using PrivateTmp, but users can access and modify /tmp as seen by the service. Move the private /tmp and /var/tmp directories into a 0077-mode directory. This way unpriviledged users on the system cannot see (or modify) /tmp as seen by the service.
2013-03-20build-sys: fix typo in human-readable outputJan Engelhardt
2013-03-20libudev: avoid potential misaligned accessesJan Engelhardt
clang reports: src/libudev/libudev-util.c:665:35: warning: cast from "const unsigned char *" to "unsigned int *" increases required alignment from 1 to 4 [-Wcast-align]
2013-03-20libude: remove special handling of "device" link, it should not be usedKay Sievers
2013-03-20zsh completion: udev - remove firmware builtinTom Gundersen
2013-03-19man/service: document behaviour on failureZbigniew Jędrzejewski-Szmek
https://bugs.freedesktop.org/show_bug.cgi?id=38355
2013-03-19catalog: remove broken links to wikiZbigniew Jędrzejewski-Szmek
https://bugs.freedesktop.org/show_bug.cgi?id=58359
2013-03-19journalct: beef up entry listingZbigniew Jędrzejewski-Szmek
The ability to dump catalog entries in full and by id is added.
2013-03-19systemd-python: small cleanupsZbigniew Jędrzejewski-Szmek
- separate methods with two empty lines for clarity - avoid malloc(0) by specyfing private data size as -1 - add method name in error messages
2013-03-19systemd-python: add journal.get_catalog()Zbigniew Jędrzejewski-Szmek
This one wraps sd_journal_get_catalog_from_message_id. Thanks to Python namespacing, we can stick to a shorter name.
2013-03-19systemd-python: add _Reader.get_catalog()Zbigniew Jędrzejewski-Szmek
This one wraps sd_journaal_get_catalog.
2013-03-19man/catalog: fix synopsis and remind to freeZbigniew Jędrzejewski-Szmek
2013-03-19systemd-python: add _Reader.closed attributeZbigniew Jędrzejewski-Szmek
This should make the file interface of _Reader complete.
2013-03-19journalctl: use _cleanup_ in one functionZbigniew Jędrzejewski-Szmek
2013-03-20rules: move builtin calls before the permissions sectionKay Sievers
<heftig> kay: systemd commit 22582bb broke cups usb printing for me <heftig> because the "lp" group isn't applied anymore <heftig> SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", ENV{ID_USB_INTERFACES}=="*:0701??:*", GROUP="lp" <heftig> moving this line to the end of 50-udev-default.rules restores correct behavior, as it's after usb_id
2013-03-19shell-completion/bash/journalctl: suppress stderrHarald Hoyer
2013-03-19keymap: Remap microphone mute and touchpad toggle for Lenovo U300sOzan Çağlayan
Separate out Ideapad U300s to its own line and add Microphone mute key. Signed-off-by: Martin Pitt <martinpitt@gnome.org>
2013-03-19keymaps: Use F20 for micmute keys to be friendly to X.orgMartin Pitt
The "micmute" key code is outside of X.org's allowed range [1]. gnome-settings-daemon interprets F20 as "microphone mute" these days [2], so use this until X.org either gets fixed or obsoleted. [1] https://bugzilla.gnome.org/show_bug.cgi?id=692071 [2] https://mail.gnome.org/archives/commits-list/2013-January/msg05822.html
2013-03-19keymap: Fix touchpad toggling on Lenovo IdeaPad U300sOzan Çağlayan
IdeaPad U300s needs mapping 0xf1 to f21 just like Lenovo V480. Signed-off-by: Martin Pitt <martinpitt@gnome.org>
2013-03-18logind: exploit previous cleanups and simplify returnsZbigniew Jędrzejewski-Szmek
2013-03-18logind: Make more use of cleanup macrosColin Walters
2013-03-18Use bus_maybe_send_reply() where applicableColin Walters
This is a followup to: commit 1a37b9b9043ef83e9900e460a9a1fccced3acf89 It will fix denial messages from dbus-daemon between gdm and systemd-logind on logging into GNOME due to this. See the previous commit for more details.
2013-03-18sd-journal: do not require path to be absoluteZbigniew Jędrzejewski-Szmek
Seems natural to be able to specify relative directory, e.g. with journalctl -D. And even if, this should be checked in front-end code, not in the library.
2013-03-18journal,shared: add _cleanup_journal_close_Zbigniew Jędrzejewski-Szmek
2013-03-18journal: use _cleanup_Zbigniew Jędrzejewski-Szmek
One log_debug() moved to match order in other functions.
2013-03-18journal: use sd_journal_close on error in sd_journal_newZbigniew Jędrzejewski-Szmek
2013-03-18systemd-python: allow Reader to be used as a context managerZbigniew Jędrzejewski-Szmek
2013-03-18test-strv.c: test STRV_FOREACH_PAIR macroDaniel Buch
2013-03-18udev: rename kernel command line option to net.ifnames=Kay Sievers
2013-03-18man: udev - clarify when RUN is executedTom Gundersen
Unlike IMPORT and PROGRAM, RUN is not executed inline, but after all the rules of the given event have been processed.
2013-03-18udev: builtin - use RUN rather than IMPORT for loading modulesTom Gundersen
The 'kmod' builtin, like the 'firmware' and 'uaccess' builtins, does not set any variables, so don't use IMPORT. Notice that this changes the behaviour slightly: the processing of subsequent rules for the event that loads a module will no longer wait for the module loading to finish. This is not expected to cause any problems, but we should keep an eye on it.
2013-03-18udev: net-name-slot - disable by kernel command line switchTom Gundersen
The properties will still be set in the udev database, but they will not be used for setting the interface names. As for the other kernel commandline switches, we allow it to be prefixed by 'rd.' to only apply in the initrd.
2013-03-18man: udev - move documentation of configuration fileTom Gundersen
Moved from udev(7) to systemd-udevd.service(8), where the rest of the documentation of the configuration of the daemon lives.
2013-03-18udev: ifdef all firmware special handlingKay Sievers
2013-03-18udev: make firmware loading optional and disable by defaultTom Gundersen
Distros that whish to support old kernels should set --with-firmware-dirs="/usr/lib/firmware/updates:/usr/lib/firmware" to retain the old behaviour.
2013-03-18man: udev - document 'builtin'Tom Gundersen
The new IMPORT{builtin} and RUN{builtin} were not documented. Also make it clear that RUN= is really an alias for RUN{program}=.
2013-03-16units: initrd, multi-user - add a few more words to Description=Kay Sievers
2013-03-16man: bootup - intrd-fs.target --> initrd.targetKay Sievers
2013-03-16journal: pass the *pid* to sd_pid_get_owner_uid()Kay Sievers
2013-03-15timer: fix grammar in messageZbigniew Jędrzejewski-Szmek
2013-03-15core: reuse the same /tmp, /var/tmp and inaccessible dirMichal Sekletar
All Execs within the service, will get mounted the same /tmp and /var/tmp directories, if service is configured with PrivateTmp=yes. Temporary directories are cleaned up by service itself in addition to systemd-tmpfiles. Directory which is mounted as inaccessible is created at runtime in /run/systemd.
2013-03-15TODO: uses for SO_REUSEPORTJosh Triplett
The new socket option SO_REUSEPORT would enable some new functionality; add it to TODO.
2013-03-15smack-setup: enable Smack/CIPSO mappingNathaniel Chen
CIPSO is the Common IP Security Option, an IETF standard for setting security levels for a process sending packets. In Smack kernels, CIPSO headers are mapped to Smack labels automatically, but can be changed. This patch writes label/category mappings from /etc/smack/cipso/ to /sys/fs/smackfs/cipso2. The mapping format is "%s%4d%4d"["%4d"]... For more information about Smack and CIPSO, see: https://kernel.org/doc/Documentation/security/Smack.txt
2013-03-15smack-setup: extract rule writing into a separate functionZbigniew Jędrzejewski-Szmek
Check all errors.
2013-03-15units: ignore systemd-sysctl on shutdownUmut Tezduyar
No need to try to stop systemd-sysctl on shutdown as this service doesn't have ExecStop= anyways.
2013-03-15core: keep mountinfo .mounts until late shutdownUmut Tezduyar
.mount units coming from /proc/self/mountinfo file are unmounted after local-fs.target is reached during shutdown. Problem: .mount units popping up in mountinfo file are added to systemd without any dependency. For that reason, they are the first one to be unmounted during shutdown. Whichever program mounted the file system deserves a chance to also unmount it. This patch ensures that /proc/self/mountinfo units will be unmounted after local-fs.target during shutdown (if they haven't been unmounted already)
2013-03-15man: fix grammarZbigniew Jędrzejewski-Szmek
2013-03-15systemd-python: add systemd.daemon wrapping sd-daemonZbigniew Jędrzejewski-Szmek
Please see the documentation (e.g. pydoc3 systemd.daemon) for full description. As usual, systemd._daemon wraps the raw interface, while systemd.daemon provides the more pythonic API. sd_listen_fds, sd_booted, sd_is_fifo, sd_is_socket, sd_is_socket_unix, sd_is_socket_inet, sd_is_mq, and SD_LISTEN_FDS_START are currently wrapped.
2013-03-15systemd-activate: pass environment variables throughZbigniew Jędrzejewski-Szmek
I need this to test half-installed socket-activated python script, which requires PYTHONPATH and LD_LIBRARY_PATH set. I assume that other people might find it useful to. -E VAR passes through VAR from the environment, while -E VAR=value sets VAR=value. systemd-activate -E PYTHONPATH=/var/tmp/inst1/usr/lib64/python3.3/site-packages -E LD_LIBRARY_PATH=/var/tmp/inst1/usr/lib -l 2000 python3 -c 'from systemd.daemon import listen_fds; print(listen_fds())'
2013-03-15sysctl: default - add safe sysrq optionsKay Sievers