summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-08-10update fixmeKay Sievers
2010-08-10build-sys: prepare release 7systemd/v7Lennart Poettering
2010-08-10unit: hook plymouth into the bootLennart Poettering
https://bugzilla.redhat.com/show_bug.cgi?id=619922
2010-08-10units: ignore exit codes of killall scriptsLennart Poettering
2010-08-10update fixmeLennart Poettering
2010-08-10getty: properly synchronize of tty devices being plugged inLennart Poettering
2010-08-10units: make sure that killall does not wait for the ttyLennart Poettering
2010-08-09main: fix auto restarting of units after a configuration reloadLennart Poettering
2010-08-09swap: properly enter maintenance mode on failureLennart Poettering
2010-08-09manager: when two pending jobs conflict, keep the one that "conflicts", ↵Lennart Poettering
remove the one that is "conflicted" This gives the writer of units control which unit is kept and which is stopped when two units conflict.
2010-08-09service: hide output of sysv scripts if quiet is passed on the kernel cmdlineLennart Poettering
2010-08-09service: properly remember if a sysv is actually enabledLennart Poettering
Previously we checked the SysV priority value to figure out if a SysV unit was enabled or not, since th value was mostly read from the S startup links. Since we read this value from the LSB headers as a fallback we hence ended up considering a lot more services enabled than were actually enabled. This patch adds an explicit boolean which encodes whether a sysv service is enabled or not via S links. https://bugzilla.redhat.com/show_bug.cgi?id=615293
2010-08-09service: show restart value in dumpLennart Poettering
2010-08-09dbus: don't call bus_path_escape() with NULL unit nameLennart Poettering
Fixes an assertion triggerable via D-Bus. https://bugzilla.redhat.com/show_bug.cgi?id=622008
2010-08-09systemctl: show exit code only if it is actually setLennart Poettering
2010-08-09update fixmeKay Sievers
2010-08-07man: minor man page fixLennart Poettering
2010-08-07systemctl: fix parsing of DBus reply in 'dot'Michal Schmidt
"systemctl dot" has been broken since the addition of the "Following=" property.
2010-08-06man: minor man page fixLennart Poettering
2010-08-06util: when formatting timestamps return '0' for 0 timestamps instead of ↵Lennart Poettering
empty string
2010-08-06sd-daemon: fix compilation on old systems lacking SOCK_CLOEXECLennart Poettering
2010-08-06update fixmeKay Sievers
2010-08-06build-sys: prepare new releasesystemd/v6Lennart Poettering
2010-08-06man: document %triggerin usageLennart Poettering
2010-08-06device: properly handle devices that are referenced before they show upLennart Poettering
2010-08-06cgroup: if the system bus cannot be found, send cgroup empty msg directly to ↵Lennart Poettering
init proces
2010-08-06manager: downgrade a few log msgs regarding conflicting but fixable jobsLennart Poettering
2010-08-06automount: order automount units after fsck, tooLennart Poettering
2010-08-06units: add missing fsck.target fileLennart Poettering
2010-08-06units: split fsck.target from sysinit.target for suse compatLennart Poettering
2010-08-06main: automatically spawn a getty on the kernel configured serial consoleLennart Poettering
2010-08-05manager: fix conflicting job checkLennart Poettering
2010-08-05manager: when breaking ordering cycle show full cycle loopLennart Poettering
2010-08-05units: always send HUP when dealing with shells/gettys/loginsLennart Poettering
2010-08-05service: read special startup dirs only on the respective distrosLennart Poettering
2010-08-05selinux: minor error handling fixLennart Poettering
2010-08-05service: always sort services from suse B runlevel before services from ↵Lennart Poettering
normal runlevels
2010-08-05reboot: handle -p switch properlyMichal Schmidt
https://bugzilla.redhat.com/show_bug.cgi?id=618678
2010-08-05selinux: fix labels only when configured for itLennart Poettering
2010-08-04units: getty - suse: login wants SIGHUPKay Sievers
2010-08-04units: suse - reboot: do not wait for ttyKay Sievers
2010-08-04reboot: don't wait for input ttyLennart Poettering
2010-08-04prepare new releasesystemd/v5Lennart Poettering
2010-08-04units: remove redundant ordering dependencyLennart Poettering
2010-08-04selinux: rework selinux tests a littleLennart Poettering
2010-08-04selinux: fix if vs. ifdef mixupLennart Poettering
2010-08-03units: make sure that prefdm wins over the getty if both are pulled inLennart Poettering
2010-08-03units: add conflicts between prefdm and getty@tty1 to avoid race for tty1Lennart Poettering
2010-08-03Systemd is causing mislabeled devices to be created and then attempting to ↵Daniel J Walsh
read them. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/28/2010 05:57 AM, Kay Sievers wrote: > On Wed, Jul 28, 2010 at 11:43, Lennart Poettering > <lennart@poettering.net> wrote: >> On Mon, 26.07.10 16:42, Daniel J Walsh (dwalsh@redhat.com) wrote: >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:7): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:8): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> >>> Lennart, we talked about this earlier. I think this is caused by the >>> modprobe calls to create /dev/autofs. Since udev is not created at the >>> point that init loads the kernel modules, the devices get created with >>> the wrong label. Once udev starts the labels get fixed. >>> >>> I can allow init_t to read device_t chr_files. >> >> Hmm, I think a cleaner fix would be to make systemd relabel this device >> properly before accessing it? Given that this is only one device this >> should not be a problem for us to maintain, I think? How would the >> fixing of the label work? Would we have to spawn restorecon for this, or >> can we actually do this in C without too much work? > > I guess we can just do what udev is doing, and call setfilecon(), with > a context of an earlier matchpathcon(). > > Kay > _______________________________________________ > systemd-devel mailing list > systemd-devel@lists.freedesktop.org > http://lists.freedesktop.org/mailman/listinfo/systemd-devel Here is the updated patch with a fix for the labeling of /dev/autofs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkxQMyoACgkQrlYvE4MpobNviACfWgxsjW2xzz1qznFex8RVAQHf gIEAmwRmRcLvGqYtwQaZ3WKIg8wmrwNk =pC2e
2010-08-03update fixmeLennart Poettering
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-11-10 20:08:27 +0000