summaryrefslogtreecommitdiff
path: root/configure.ac
AgeCommit message (Collapse)Author
2011-02-08build-sys: ensure selinux configure check follows logic of other optional ↵Lennart Poettering
features
2011-02-08build-sys: autodetect and use pkg-config for libselinuxAlexey Shabalin
Hi! libselinux has a pkg-config file: $ rpm -qf /usr/lib64/pkgconfig/libselinux.pc libselinux-devel-2.0.98-alt1 $ cat /usr/lib64/pkgconfig/libselinux.pc prefix=/usr exec_prefix=${prefix} libdir=${exec_prefix}/lib64 includedir=/usr/include Name: libselinux Description: SELinux utility library Version: 2.0.98 URL: http://userspace.selinuxproject.org/ Libs.private: -lsepol Libs: -lselinux Cflags: Patch for use pkg-config in attach. -- Alexey Shabalin
2011-01-22build-sys: prep v17Lennart Poettering
2011-01-21vala 0.10 seem to work fineKay Sievers
2011-01-20vala: convert from dbus-glib to gdbusLennart Poettering
2011-01-08build-sys: prepare v16systemd/v16Lennart Poettering
2011-01-04fix help message for --with-tty-gid configure optionMichael Biebl
2011-01-04mount-setup: mount /dev/pts with mode=620,gid=5 by default and make GID ↵Lennart Poettering
overridable via configure switch
2010-11-29build-sys: frugalware linux supportMiklos Vajna
2010-11-27Ensure LIBNOTIFY07 conditional is always setMichael Biebl
Also use PKG_CHECK_EXISTS to test if libnotify is recent enough
2010-11-26gnome-ask-password-agent: also support libnotify < 0.7 for nowKay Sievers
2010-11-25build-sys: prepare release 15systemd/v15Lennart Poettering
2010-11-24bump version in preparation for releaseLennart Poettering
2010-11-23build-sys: allow cross-compilationThierry Reding
When cross-compiling systemd, the introspection XML files fail to be generated because the systemd host binary is not executable. This patch works around this by putting the introspection XML data into separate ELF sections and extracting them from the binary when generating the XML files. The extracted XML data is passed through the strings utility in order to strip the trailing NUL character. A small AWK script is used to prepend the doctype and add the opening and closing node tags respectively. Finally, the C preprocessor is used to substitute the correct doctype information from the D-Bus header files.
2010-11-18build-sys: bump for v13systemd/v13Lennart Poettering
2010-11-17Revert "update TODO"Kay Sievers
This reverts commit afe635e71838c9e62e25a928cbcefc343744dda5. Oops, libnotify should not have been in here.
2010-11-17update TODOKay Sievers
2010-11-17build-sys: prep release 12systemd/v12Lennart Poettering
2010-11-15build-sys: fix building against libnotify 0.7Matthias Clasen
Here are two patches I needed to get systemd to build against the current libnotify and vala releases.
2010-11-15build-sys: make check for libnotify explicitLennart Poettering
2010-11-15build-sys: dbus-glib is just required by gtk's systemadmGustavo Sverzut Barbieri
do not fail if there is no dbus-glib and we're not building the gtk frontend.
2010-11-12cryptsetup: hook up tool with ask-passwordLennart Poettering
2010-10-25ubuntu: Treat Ubuntu as a distinct distro in configure.ac etcAndrew Edmunds
Previously Ubuntu was treated as being equivalent to Debian, but the two distributions require different behaviour in certain places. This commit does not change the behaviour of systemd on either distro but it creates a framework for changes to be introduced by later commits. The following previously meant "Target is Debian or Ubuntu". * configure option "--with-distro=debian" * C preprocessor symbol "TARGET_DEBIAN" * Automake conditional "TARGET_DEBIAN" After this commit, all of the above are redefined to mean "Target is Debian" The following are introduced to mean "Target is Ubuntu". * configure option "--with-distro=ubuntu" * C preprocessor symbol "TARGET_UBUNTU" * Automake conditional "TARGET_UBUNTU" Most code written for Debian will also be applicable to Ubuntu. An extra Automake conditional "TARGET_DEBIAN_OR_UBUNTU" is introduced to avoid duplication of code that would otherwise occur. This commit updates configure.ac, Makefile.am and distro-specific source files in line with the above definitions.
2010-10-07build-sys: prepare v11systemd/v11Lennart Poettering
2010-10-05build-sys: Add compiler and linker flags to reduce binary sizeGustavo Sverzut Barbieri
Reduce number of exported symbols with -fvisibility=hidden by default, this is safe as we're not generating and loadable library and our binaries should have no exported symbol other than main(). This alone reduces around 4kb per binary. It will also request GCC to emit every function and data variable in its own section, then request the linker to remove unused sections. This reduces the size of utility tools (/lib/systemd/systemd-*) by half or even more (in my system some binaries went from 84kb to 32kb).
2010-09-27sysv: optionally disable of SysV init/rcN.d support at compile timeFabiano Fidencio
This patch adds a cpp definition HAVE_SYSV_COMPAT that is used to isolate code dealing with /etc/init.d and /etc/rcN.d for systems where it does not make sense (one that does not use sysv or one that is fully systemd native). The patch tries to be as little intrusive as possible, however in order to minimize the number of #ifdef'ed regions I've reordered some code in path-lookup.c:lookup_paths_init() where all code dealing with sysv is now isolated under running_as == MANAGER_SYSTEM as well. Moreover, In struct Service, some fields were rearranged to reduce the number of ifdefs. Lennart's suggestions were fixed and squashed with the original patch, that was sent by Gustavo Sverzut Barbieri (barbieri@profusion.mobi).
2010-09-23readahead: implement minimal readahead logic based on fanotify(), mincore() ↵Lennart Poettering
and readahead()
2010-09-17ask-password: popup notification when we ask for a passwordLennart Poettering
2010-09-17ask-password: add minimal framework to allow services query SSL/harddisk ↵Lennart Poettering
passphrases from the user
2010-09-14build-sys: bump versionsystemd/v10Lennart Poettering
2010-09-06systemctl: make --version a little bit more verboseLennart Poettering
2010-09-03build-sys: prepare new releasesystemd/v9Lennart Poettering
2010-08-26build-sys: show audit/selinux in summaryLennart Poettering
2010-08-25build-sys: prepare release v8systemd/v8Lennart Poettering
2010-08-11main: disable nscd properly, if possibleLennart Poettering
2010-08-11audit,utmp: implement audit logic and rip utmp stuff out of the main daemon ↵Lennart Poettering
and into a helper binary
2010-08-10build-sys: prepare release 7systemd/v7Lennart Poettering
2010-08-06build-sys: prepare new releasesystemd/v6Lennart Poettering
2010-08-04prepare new releasesystemd/v5Lennart Poettering
2010-08-03Systemd is causing mislabeled devices to be created and then attempting to ↵Daniel J Walsh
read them. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/28/2010 05:57 AM, Kay Sievers wrote: > On Wed, Jul 28, 2010 at 11:43, Lennart Poettering > <lennart@poettering.net> wrote: >> On Mon, 26.07.10 16:42, Daniel J Walsh (dwalsh@redhat.com) wrote: >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:7): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:8): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> >>> Lennart, we talked about this earlier. I think this is caused by the >>> modprobe calls to create /dev/autofs. Since udev is not created at the >>> point that init loads the kernel modules, the devices get created with >>> the wrong label. Once udev starts the labels get fixed. >>> >>> I can allow init_t to read device_t chr_files. >> >> Hmm, I think a cleaner fix would be to make systemd relabel this device >> properly before accessing it? Given that this is only one device this >> should not be a problem for us to maintain, I think? How would the >> fixing of the label work? Would we have to spawn restorecon for this, or >> can we actually do this in C without too much work? > > I guess we can just do what udev is doing, and call setfilecon(), with > a context of an earlier matchpathcon(). > > Kay > _______________________________________________ > systemd-devel mailing list > systemd-devel@lists.freedesktop.org > http://lists.freedesktop.org/mailman/listinfo/systemd-devel Here is the updated patch with a fix for the labeling of /dev/autofs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkxQMyoACgkQrlYvE4MpobNviACfWgxsjW2xzz1qznFex8RVAQHf gIEAmwRmRcLvGqYtwQaZ3WKIg8wmrwNk =pC2e
2010-07-23socket: SELinux support for socket creation.Daniel J Walsh
It seems to work on my machine. /proc/1/fd/20 system_u:system_r:system_dbusd_t:s0 /proc/1/fd/21 system_u:system_r:avahi_t:s0 And the AVC's seem to have dissapeared when a confined app trys to connect to dbus or avahi. If you run with this patch and selinux-policy-3.8.8-3.fc14.noarch You should be able to boot in enforcing mode.
2010-07-22build-sys: prepare release 4Lennart Poettering
2010-07-22build-sys: fix compatibility with vala 0.9Lennart Poettering
2010-07-13build-sys: bump releasesystemd/v3Lennart Poettering
2010-07-12cgroup: reimplement the last bit of libcgroup functionality nativelyLennart Poettering
2010-07-12build-sys: require udev 160 to fix notify socket abstract namespace sockaddr ↵Lennart Poettering
length
2010-07-10build-sys: drop special name hack for dbus.service since a native service ↵Lennart Poettering
file is now shipped upstream dbus
2010-07-09build-sys: bump versionLennart Poettering
2010-07-09build-sys: disable inline warningsLennart Poettering
2010-07-07build-sys: prepare release 1systemd/v1Lennart Poettering