~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2016-10-06	user-util: rework maybe_setgroups() a bit	Lennart Poettering
	Let's drop the caching of the setgroups /proc field for now. While there's a strict regime in place when it changes states, let's better not cache it since we cannot really be sure we follow that regime correctly. More importantly however, this is not in performance sensitive code, and there's no indication the cache is really beneficial, hence let's drop the caching and make things a bit simpler. Also, while we are at it, rework the error handling a bit, and always return negative errno-style error codes, following our usual coding style. This has the benefit that we can sensible hanld read_one_line_file() errors, without having to updat errno explicitly.
2016-10-06	core: do not fail in a container if we can't use setgroups	Giuseppe Scrivano
	It might be blocked through /proc/PID/setgroups
2016-02-10	tree-wide: remove Emacs lines from all files	Daniel Mack
	This should be handled fine now by .dir-locals.el, so need to carry that stuff in every file.
2016-01-12	capabilities: added support for ambient capabilities.	Ismo Puustinen
	This patch adds support for ambient capabilities in service files. The idea with ambient capabilities is that the execed processes can run with non-root user and get some inherited capabilities, without having any need to add the capabilities to the executable file. You need at least Linux 4.3 to use ambient capabilities. SecureBit keep-caps is automatically added when you use ambient capabilities and wish to change the user. An example system service file might look like this: [Unit] Description=Service for testing caps [Service] ExecStart=/usr/bin/sleep 10000 User=nobody AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW After starting the service it has these capabilities: CapInh: 0000000000003000 CapPrm: 0000000000003000 CapEff: 0000000000003000 CapBnd: 0000003fffffffff CapAmb: 0000000000003000
2016-01-12	capabilities: keep bounding set in non-inverted format.	Ismo Puustinen
	Change the capability bounding set parser and logic so that the bounding set is kept as a positive set internally. This means that the set reflects those capabilities that we want to keep instead of drop.
2015-11-30	basic: include only what we use	Thomas Hindoe Paaboel Andersen
	This is a cleaned up result of running iwyu but without forward declarations on src/basic.
2015-11-09	treewide: apply errno.cocci	Michal Schmidt
	with small manual cleanups for style.
2015-10-27	util-lib: split out allocation calls into alloc-util.[ch]	Lennart Poettering

2015-10-27	src/basic: rename audit.[ch] → audit-util.[ch] and capability.[ch] → ↵	Lennart Poettering
	capability-util.[ch] The files are named too generically, so that they might conflict with the upstream project headers. Hence, let's add a "-util" suffix, to clarify that this are just our utility headers and not any official upstream headers.