~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2012-10-18	systemd: use structured logging for unit changes	Zbigniew Jędrzejewski-Szmek
	Information which unit a log entry pertains to enables systemctl status to display more log messages.
2012-10-16	SELinux patch still broken, in that we are not checking the correct source ↵	Daniel J Walsh
	context. This patch does the dbus calls correctly.
2012-10-03	selinux: properly free dbus error	Lennart Poettering

2012-10-02	selinux: remove anything PID1-specific from selinux-access.[ch] so that we ↵	Lennart Poettering
	can reuse it in logind
2012-10-02	audit: turn the audit fd into a static variable	Lennart Poettering
	As audit is pretty much just a special kind of logging we should treat it similar, and manage the audit fd in a static variable. This simplifies the audit fd sharing with the SELinux access checking code quite a bit.
2012-10-02	selinux: rework selinux access check logic	Lennart Poettering
	a) Instead of parsing the bus messages inside of selinux-access.c simply pass everything pre-parsed in the functions b) implement the access checking with a macro that resolves to nothing on non-selinux builds c) split out the selinux checks into their own sources selinux-util.[ch] d) this unifies the job creation code behind the D-Bus calls Manager.StartUnit() and Unit.Start().
2012-09-28	selinux: fix various problems	Daniel J Walsh

2012-09-24	selinux: use standard D-Bus error id for access denied	Lennart Poettering

2012-09-21	core: call va_end in all cases	Lukas Nykryn

2012-09-18	selinux: rework method tail, make it into a nulstr array	Lennart Poettering

2012-09-18	selinux: use existing library calls for audit data	Lennart Poettering

2012-09-18	selinux: prefer source path over fragment path	Lennart Poettering

2012-09-18	selinux: add bus service access control	Daniel J Walsh
	-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This patch adds the ability to look at the calling process that is trying to do dbus calls into systemd, then it checks with the SELinux policy to see if the calling process is allowed to do the activity. The basic idea is we want to allow NetworkManager_t to be able to start and stop ntpd.service, but not necessarly mysqld.service. Similarly we want to allow a root admin webadm_t that can only manage the apache environment. systemctl enable httpd.service, systemctl disable iptables.service bad. To make this code cleaner, we really need to refactor the dbus-manager.c code. This has just become a huge if-then-else blob, which makes doing the correct check difficult. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlBJBi8ACgkQrlYvE4MpobOzTwCdEUikbvRWUCwOb83KlVF0Nuy5 lRAAnjZZNuc19Z+aNxm3k3nwD4p/JYco =yops -----END PGP SIGNATURE-----