Age | Commit message (Expand) | Author |
2014-11-05 | core: introduce new Delegate=yes/no property controlling creation of cgroup s... | Lennart Poettering |
2014-10-23 | mac: also rename use_{smack,selinux,apparmor}() calls so that they share the ... | Lennart Poettering |
2014-10-23 | mac: rename apis with mac_{selinux/smack}_ prefix | WaLyong Cho |
2014-10-17 | environment: append unit_id to error messages regarding EnvironmentFile | Lukas Nykryn |
2014-10-17 | execute: downgrade namespace error to "warning" | Lennart Poettering |
2014-10-17 | execute: don't fail child when we don't have privileges to setup namespaces | Michal Sekletar |
2014-10-11 | Report aa_change_onexec error code | Michael Scherer |
2014-09-30 | core: execute - don't leak strv | Tom Gundersen |
2014-09-29 | swap: introduce Discard property | Jan Synacek |
2014-09-19 | socket: introduce SELinuxContextFromNet option | Michal Sekletar |
2014-09-08 | execute: silence warnings | Thomas Hindoe Paaboel Andersen |
2014-09-08 | service: hook up custom endpoint logic | Daniel Mack |
2014-09-08 | namespace: add support for custom kdbus endpoint | Daniel Mack |
2014-09-08 | bus: add kdbus endpoint types | Daniel Mack |
2014-09-05 | exec: move code executed after fork into exec_child() | Daniel Mack |
2014-09-05 | exec: factor out most function arguments of exec_spawn() to ExecParameters | Daniel Mack |
2014-08-26 | util: make use of newly added reset_signal_mask() call wherever appropriate | Lennart Poettering |
2014-08-21 | execute: explain in a comment, why close_all_fds() is invoked the second time... | Lennart Poettering |
2014-08-21 | core: unify how we generate the prefix string when dumping unit state | Lennart Poettering |
2014-08-19 | Revert "socket: introduce SELinuxLabelViaNet option" | Lennart Poettering |
2014-08-19 | socket: introduce SELinuxLabelViaNet option | Michal Sekletar |
2014-07-29 | time-util: add and use USEC/NSEC_INFINIY | Kay Sievers |
2014-07-07 | firstboot: add new component to query basic system settings on first boot, or... | Lennart Poettering |
2014-07-03 | machinectl: show /etc/os-release information of container in status output | Lennart Poettering |
2014-06-24 | use more _cleanup_ macro | Ronny Chevalier |
2014-06-04 | core: rename ReadOnlySystem= to ProtectSystem= and add a third value for also... | Lennart Poettering |
2014-06-03 | core: add new ReadOnlySystem= and ProtectedHome= settings for service units | Lennart Poettering |
2014-05-15 | Remove unnecessary casts in printfs | Zbigniew Jędrzejewski-Szmek |
2014-03-24 | core: remove tcpwrap support | Lennart Poettering |
2014-03-24 | util: replace close_pipe() with new safe_close_pair() | Lennart Poettering |
2014-03-18 | util: replace close_nointr_nofail() by a more useful safe_close() | Lennart Poettering |
2014-03-05 | missing: if RLIMIT_RTTIME is not defined by the libc, then we need a new defi... | Lennart Poettering |
2014-03-03 | core: introduce new RuntimeDirectory= and RuntimeDirectoryMode= unit settings | Lennart Poettering |
2014-03-03 | execute: free directory path if we fail to remove it because we cannot alloca... | Lennart Poettering |
2014-02-26 | exec: imply NoNewPriviliges= only when seccomp filters are used in user mode | Lennart Poettering |
2014-02-26 | core: add new RestrictAddressFamilies= switch | Lennart Poettering |
2014-02-26 | seccomp: we should control NO_NEW_PRIVS on our own, not let seccomp do this f... | Lennart Poettering |
2014-02-21 | core: Add AppArmor profile switching | Michael Scherer |
2014-02-19 | execute: modernizations | Lennart Poettering |
2014-02-19 | core: add Personality= option for units to set the personality for spawned pr... | Lennart Poettering |
2014-02-18 | seccomp: add helper call to add all secondary archs to a seccomp filter | Lennart Poettering |
2014-02-17 | core: store and expose SELinuxContext field normalized as bool + string | Lennart Poettering |
2014-02-13 | core: add SystemCallArchitectures= unit setting to allow disabling of non-native | Lennart Poettering |
2014-02-12 | core: fix build without libseccomp | Lennart Poettering |
2014-02-12 | core: rework syscall filter | Lennart Poettering |
2014-02-12 | syscallfilter: port to libseccomp | Ronny Chevalier |
2014-02-10 | nspawn,man: use a common vocabulary when referring to selinux security contexts | Lennart Poettering |
2014-02-10 | exec: Add support for ignoring errors on SELinuxContext by prefixing it with ... | Michael Scherer |
2014-02-10 | exec: Ignore the setting SELinuxContext if selinux is not enabled | Michael Scherer |
2014-02-10 | exec: Add SELinuxContext configuration item | Michael Scherer |