Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-02-12 | core: rework syscall filter | Lennart Poettering | |
- Allow configuration of an errno error to return from blacklisted syscalls, instead of immediately terminating a process. - Fix parsing logic when libseccomp support is turned off - Only keep the actual syscall set in the ExecContext, and generate the string version only on demand. | |||
2014-02-12 | syscallfilter: port to libseccomp | Ronny Chevalier | |
2014-02-12 | sd-dhcp: make sure client->secs > 0 | Tom Gundersen | |
Some DHCP servers will not work correctly if secs == 0, so round up to at least 1. | |||
2014-02-12 | networkd: work inside containers | Tom Gundersen | |
Udev does not run in containers, so instead of relying on it to tell us when a network device is ready to be used by networkd, we simply assume that any device was fully initialized before being added to the container. | |||
2014-02-12 | update TODO (add section for things to fix before 209) | Lennart Poettering | |
2014-02-12 | build-sys: make lxml required when generating indices | Zbigniew Jędrzejewski-Szmek | |
Since the manpage indices generated without lxml would be missing some parts, it doesn't make sense to keep lxml optional anymore. | |||
2014-02-12 | build-sys: add less-variables.xml to EXTRA_DIST | Zbigniew Jędrzejewski-Szmek | |
2014-02-12 | man: use xinclude to de-deduplicate common text | Zbigniew Jędrzejewski-Szmek | |
I only tested with python-lxml. I'm not sure if xml.etree should be deprecated. | |||
2014-02-12 | pager: support SYSTEMD_LESS environment variable | Jason A. Donenfeld | |
This allows customization of the arguments used by less. The main motivation is that some folks might not like having --no-init on every invocation of less. | |||
2014-02-12 | nspawn: newer kernels (>= 3.14) allow resetting the audit loginuid, make use ↵ | Lennart Poettering | |
of this | |||
2014-02-12 | test: fix "make check" | Lennart Poettering | |
Let's remove the tests for cg_path_get_machine_name(), since they no longer operate solely on the cgroup path, but actually look up data in /run. Since we have a test for cg_pid_get_machine_name() this shouldn't be too much of a loss. | |||
2014-02-12 | machinectl: add new "machinectl reboot" call | Lennart Poettering | |
2014-02-11 | logind: ignore PropertiesChanged signals for jobs | Zbigniew Jędrzejewski-Szmek | |
Otherwise we get a (harmless) message like: systemd-logind[30845]: Failed to process message [type=signal sender=:1.36 path=/org/freedesktop/systemd1/job/4674 interface=org.freedesktop.DBus.Properties member=PropertiesChanged signature=sa{sv}as]: Invalid argument | |||
2014-02-11 | logind: always kill session when termination is requested | Zbigniew Jędrzejewski-Szmek | |
KillUserProcesses=yes/no should be ignored when termination is explicitly requested. | |||
2014-02-11 | journald: log provenience of signals | Zbigniew Jędrzejewski-Szmek | |
2014-02-11 | units: make use of nspawn's --keep-unit switch in systemd-nspawn@.service | Lennart Poettering | |
2014-02-11 | machined: fix enumeration of existing machines on restart | Lennart Poettering | |
2014-02-11 | update TODO | Lennart Poettering | |
2014-02-11 | logind: use session_get_state() to get sessions state of the user | Djalal Harouni | |
In function user_get_state() remove the session_is_active() check, just count on the session_get_state() function to get the correct session state. session_is_active() may return true before starting the session scope and user service, this means it will return true even before the creation of the session fifo_fd which will produce incorrect states. So be consistent and just use session_get_state(). | |||
2014-02-11 | efi: fix Undefined reference efi_loader_get_boot_usec when EFI support is ↵ | Cristian Rodríguez | |
disabled | |||
2014-02-11 | machined: optionally, allow registration of pre-existing units (scopes | Lennart Poettering | |
or services) as machine with machined | |||
2014-02-11 | util: modernize readlink_malloc() a bit | Lennart Poettering | |
2014-02-11 | util: drop parse_user_at_host() since its unused now | Lennart Poettering | |
2014-02-11 | nspawn: add --register=yes|no switch to optionally disable registration of ↵ | Lennart Poettering | |
the container with machined | |||
2014-02-11 | sd-dhcp: split out packet handling from client | Tom Gundersen | |
2014-02-10 | sd-bus: export sd_bus_call{,_async,_async_cancel} | David Herrmann | |
The .sym file somehow lacks these declarations, so add these. You have to run "make clean" to make sure the sym-test runs fine afterwards. | |||
2014-02-10 | networkd: link - correctly skip state ENSLAVING when no vlans configured | Tom Gundersen | |
This fixes a regression introduced in 672682a6b | |||
2014-02-10 | networkd: VLAN - allow multiple vlans to be created on a link | Tom Gundersen | |
Also limit the range of vlan ids. Other implementations and documentation use the ranges {0,1}-{4094,4095}, but we use the one accepted by the kernel: 0-4094. Reported-by: Oleksii Shevchuk <alxchk@gmail.com> | |||
2014-02-10 | pam: use correct log level | Michal Sekletar | |
2014-02-10 | sd-rtnl: added support for a few more attributes | Susant Sahani | |
2014-02-10 | sd-rtnl: test - improve test of MTU a bit | Tom Gundersen | |
We are more likely to catch errors if we don't use '0' as test value. | |||
2014-02-10 | sd-rtnl: add test cases for link | Susant Sahani | |
2014-02-10 | nspawn: add new --share-system switch to run a container without PID/UTS/IPC ↵ | Lennart Poettering | |
namespacing | |||
2014-02-10 | update TODO | Lennart Poettering | |
2014-02-10 | nspawn,man: use a common vocabulary when referring to selinux security contexts | Lennart Poettering | |
Let's always call the security labels the same way: SMACK: "Smack Label" SELINUX: "SELinux Security Context" And the low-level encapsulation is called "seclabel". Now let's hope we stick to this vocabulary in future, too, and don't mix "label"s and "security contexts" and so on wildly. | |||
2014-02-10 | exec: Add support for ignoring errors on SELinuxContext by prefixing it with ↵ | Michael Scherer | |
-, like for others settings. Also remove call to security_check_context, as this doesn't serve anything, since setexeccon will fail anyway. | |||
2014-02-10 | exec: Ignore the setting SELinuxContext if selinux is not enabled | Michael Scherer | |
2014-02-10 | exec: Add SELinuxContext configuration item | Michael Scherer | |
This permit to let system administrators decide of the domain of a service. This can be used with templated units to have each service in a différent domain ( for example, a per customer database, using MLS or anything ), or can be used to force a non selinux enabled system (jvm, erlang, etc) to start in a different domain for each service. | |||
2014-02-10 | includes: remove duplicate includes | Tom Gundersen | |
Found by the new check-includes make target. | |||
2014-02-10 | build-sys: move python helpers to tools directory | Karel Zak | |
Note that make-man-rules.py is missing in EXTRA_DIST=, this patch fixes this mistake too. | |||
2014-02-10 | build-sys: add check-includes build target and script | Karel Zak | |
2014-02-10 | fstab-generator: Create fsck-root symlink with correct path | Colin Guthrie | |
This was noticed in Brussels at the hackfest. The fstab-generator currently creates a broken symlink pointing to itself in /run/systemd/generator/local-fs.target.wants/ for systemd-fsck-root.service | |||
2014-02-10 | nspawn: require /etc/os-release only for init | Vincent Batts | |
/etc/os-release is expected for the case for booting a full system, and need not be required for thin container execution. | |||
2014-02-10 | networkd: fix setting dns from dhcp | Tom Gundersen | |
2014-02-09 | man: fix another reference in systemd-inhibit(1) | Zbigniew Jędrzejewski-Szmek | |
http://bugs.debian.org/738316 | |||
2014-02-09 | man: fix reference in systemd-inhibit(1) | Zbigniew Jędrzejewski-Szmek | |
http://bugs.debian.org/738316 | |||
2014-02-08 | manager: fix initialization of plymouth socket | Zbigniew Jędrzejewski-Szmek | |
I'm not sure why this makes a difference... | |||
2014-02-08 | cryptsetup-generator: auto add deps for device as password | Dave Reisner | |
If the password is a device file, we can add Requires/After dependencies on the device rather than requiring the user to do so. | |||
2014-02-08 | core: use automatic cleanup in two functions | Zbigniew Jędrzejewski-Szmek | |
2014-02-08 | core: do not print invalid utf-8 in error messages | Zbigniew Jędrzejewski-Szmek | |