summaryrefslogtreecommitdiff
path: root/man/systemd.exec.xml
AgeCommit message (Expand)Author
2017-02-21man: document that ProtectKernelTunables= and ProtectControlGroups= implies M...Lennart Poettering
2017-02-21man: use https:// in URLsAsciiWolf
2017-02-09man: improve documentation on seccomp regarding alternative ABIsLennart Poettering
2017-02-09Revert "core/execute: set HOME, USER also for root users"Lennart Poettering
2017-02-08Merge pull request #4962 from poettering/root-directory-2Zbigniew Jędrzejewski-Szmek
2017-02-08man: add more commas for clarify and reword a few sentencesZbigniew Jędrzejewski-Szmek
2017-02-08seccomp: on s390 the clone() parameters are reversedLennart Poettering
2017-02-08seccomp: MemoryDenyWriteExecute= should affect both mmap() and mmap2() (#5254)Lennart Poettering
2017-02-07core: add RootImage= setting for using a specific image file as root director...Lennart Poettering
2017-02-07core: add a per-unit setting MountAPIVFS= for mounting /dev, /proc, /sys in c...Lennart Poettering
2017-02-06man: Document that RestrictAddressFamilies= doesn't work on s390/s390x/...Lennart Poettering
2017-02-03core/execute: set HOME, USER also for root usersZbigniew Jędrzejewski-Szmek
2017-02-02man: fix spelling error parth -> pathBrandon Philips
2017-01-19man: fix typos (#5109)Jakub Wilk
2017-01-17Merge pull request #4991 from poettering/seccomp-fixZbigniew Jędrzejewski-Szmek
2017-01-11Merge pull request #5009 from ian-kelling/ian-mnt-namespace-docZbigniew Jędrzejewski-Szmek
2017-01-03doc: MountFlags= don't reference container which may not exist (#5011)Ian Kelling
2017-01-03doc: correct "or" to "and" in MountFlags= description (#5010)Ian Kelling
2017-01-03man: document mount deletion between commandsIan Kelling
2016-12-29Merge pull request #4994 from poettering/private-tmp-tmpfilesMartin Pitt
2016-12-29man: add brief documentation for the (sd-pam) processes created due to PAMNam...Lennart Poettering
2016-12-27core: implicitly order units with PrivateTmp= after systemd-tmpfiles-setup.se...Lennart Poettering
2016-12-27seccomp: add two new filter sets: @reboot and @swapLennart Poettering
2016-12-14core: add ability to define arbitrary bind mounts for servicesLennart Poettering
2016-12-06man: fix $SERVICE_RESULT/$EXIT_CODE/$EXIT_STATUS documentationJouke Witteveen
2016-11-29bus-util: add protocol error type explanationJouke Witteveen
2016-11-23man: document protocol error type for service failures (#4724)Jouke Witteveen
2016-11-21seccomp: add @filesystem syscall group (#4537)Lennart Poettering
2016-11-17namespace: simplify, optimize and extend handling of mounts for namespaceLennart Poettering
2016-11-15doc: move ProtectKernelModules= documentation near ProtectKernelTunalbes=Djalal Harouni
2016-11-15doc: note when no new privileges is impliedDjalal Harouni
2016-11-04core: add new RestrictNamespaces= unit file settingLennart Poettering
2016-11-03Merge pull request #4548 from keszybz/seccomp-helpZbigniew Jędrzejewski-Szmek
2016-11-03doc: clarify NoNewPrivileges (#4562)Kees Cook
2016-11-03seccomp-util, analyze: export comments as a help stringZbigniew Jędrzejewski-Szmek
2016-11-03analyze: add syscall-filter verbZbigniew Jędrzejewski-Szmek
2016-11-02man: document that too strict system call filters may affect the service managerLennart Poettering
2016-11-02seccomp: add two new syscall groupsLennart Poettering
2016-11-02man: two minor fixesLennart Poettering
2016-11-02seccomp: include pipes and memfd in @ipcLennart Poettering
2016-11-02seccomp: drop execve() from @process listLennart Poettering
2016-11-02seccomp: add clock query and sleeping syscalls to "@default" groupLennart Poettering
2016-11-01seccomp: allow specifying arm64, mips, ppc (#4491)Zbigniew Jędrzejewski-Szmek
2016-10-31man: fix typos (#4527)Jakub Wilk
2016-10-28Merge pull request #4495 from topimiettinen/block-shmat-execDjalal Harouni
2016-10-26seccomp: also block shmat(..., SHM_EXEC) for MemoryDenyWriteExecuteTopi Miettinen
2016-10-24man: document the default value of NoNewPrivileges=Zbigniew Jędrzejewski-Szmek
2016-10-20man: document default for User=Lennart Poettering
2016-10-17core/exec: add a named-descriptor option ("fd") for streams (#4179)Luca Bruno
2016-10-17man: avoid abbreviated "cgroups" terminology (#4396)Lennart Poettering
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-27 21:17:38 +0000