summaryrefslogtreecommitdiff
path: root/src/execute.c
AgeCommit message (Collapse)Author
2011-08-02exec: introduce PrivateNetwork= process option to turn off network access to ↵Lennart Poettering
specific services
2011-08-01execute: properly enforce groupLennart Poettering
https://bugzilla.redhat.com/show_bug.cgi?id=723892
2011-08-01umask: change default umask to 0022 just to be sure, and set it explicitly ↵Lennart Poettering
in all binaries, in order to make sure it is set when started from the terminal
2011-07-23util: make use of get_user_creds() and get_group_creds() wherever applicableLennart Poettering
2011-07-23util: user parse_uid() wherever applicableLennart Poettering
2011-07-01nspawn: Move the get_user_creds from execute.c to utils.c for later usage in ↵Michal Vyskocil
nspawn.c.
2011-06-30execute: properly pass PAM environment to executed processLennart Poettering
2011-06-30execute: fix PAM error checkingLennart Poettering
2011-06-30execute: invoke sigwait() in a loop when waiting for PAM parent, to avoid ↵Lennart Poettering
spurious wake-ups
2011-06-30execute: don't invoke pam_setcred, since we are not running on a tty where ↵Lennart Poettering
the user could change his password
2011-06-30execute: do initgroups() first, pam initialization second so that it can ↵Lennart Poettering
still modify the groups list
2011-06-30exec: add ControlGroupModify= switch to allow changing access mode to cgroups fsLennart Poettering
2011-06-28execute: don't choke when systemd was compiled with a different CAP_LAST_CAP ↵Lennart Poettering
then what it is run with
2011-05-18exec: hangup/reset/deallocate VTs in gettysLennart Poettering
Explicitly disconnect all clients from a VT when a getty starts/finishes (requires TIOCVHANGUP, available in 2.6.29). Explicitly deallocate getty VTs in order to flush scrollback buffer. Explicitly reset terminals to a defined state before spawning getty.
2011-04-19execute: when we run as PID 1 the kernel doesn't give us CAP_SETPCAP by ↵Lennart Poettering
default. Get that temporarily when dropping capabilities for good
2011-04-12execute: don't fail if we cannot fix OOM in a containerLennart Poettering
2011-04-06service: fix units with more than one socketLennart Poettering
https://bugzilla.redhat.com/show_bug.cgi?id=693289
2011-03-31log: fix shifting of facilitiesLennart Poettering
2011-03-31src: our lord is coverityLennart Poettering
2011-03-29exec: drop process group kill mode since it has little use and confuses the userLennart Poettering
2011-03-18exec: properly apply capability bounding set, add inverted bounding setsLennart Poettering
2011-03-17def: centralize definition of default timeout in one placeLennart Poettering
2011-03-14core: move abstract namespace sockets to /dev/.runLennart Poettering
Now that we have /dev/.run there's no need to use abstract namespace sockets. So, let's move things to /dev/.run, to make things more easily discoverable and improve compat with chroot() and fs namespacing.
2011-03-04execute: load environment files at time of execution, not when we load the ↵Lennart Poettering
service configuration https://bugzilla.redhat.com/show_bug.cgi?id=661282
2011-03-03kill: always send SIGCONT after SIGTERMLennart Poettering
When we kill a process to terminate it make sure to send SIGCONT to ensure it is unpaused and processes the signal.
2011-02-28Spelling CorrectionsHarald Hoyer
Just some lame spelling corrections with no functionality.
2011-02-15execute: optionally forward program output to /dev/console in addition to ↵Lennart Poettering
syslog/kmsg
2011-01-18execute: make sending of SIGKILL on shutdown optionalLennart Poettering
2011-01-06execute,util: fix two small memory leaksLennart Poettering
2011-01-06execute: drop empty assignments from env blocks on execution but keep them ↵Lennart Poettering
around otherwise to make them visible
2010-11-15exec: automatically determine right TERM= setting based on tty nameLennart Poettering
2010-10-22systemctl: introduce systemctl killLennart Poettering
2010-10-13unit: add minimal condition checker for unit startupLennart Poettering
2010-10-08service: optionally, create INIT_PROCESS/DEAD_PROCESS entries for a serviceLennart Poettering
This should fix accounting for pam_limits and suchlike. https://bugzilla.redhat.com/show_bug.cgi?id=636036
2010-10-07util: never use sizeof(sa_family_t) when calculating sockaddr sizesLennart Poettering
2010-08-31exec: replace OOMAdjust= by OOMScoreAdjust= to follow new kernel interfaceLennart Poettering
This replaces OOMAdjust= by OOMScoreAdjust= in the config files, breaking compatibility with older unit files. However, this keeps compat with older kernels which lack the new OOM rework.
2010-08-30exec: make sure O_NONBLOCK is off for all sockets passed as STDIN/STDOUT/STDERRLennart Poettering
2010-08-20service/systemctl: don't consider LSB exit codes 5 and 6 as failure, and ↵Lennart Poettering
decode exit codes in systemctl
2010-08-14emacs: make sure nobody accidently adds tabs to our sourcesLennart Poettering
2010-08-11clang: fix numerous little issues found with clang-analyzerLennart Poettering
2010-07-14socket: don't close sockets when activating per-connection unitsLennart Poettering
2010-07-12execute: inherit from original input, not the fixed upLennart Poettering
2010-07-12execute: reword commentLennart Poettering
2010-07-12execute: close inherited fds earlierLennart Poettering
2010-07-11execute: use right logger socketLennart Poettering
2010-07-10execute: add ability to configure the kill signalLennart Poettering
2010-07-08execute: support minimal environment variable replacement when executing ↵Lennart Poettering
processes
2010-07-08execute: if the main process of a service already owns the TTY, don't wait ↵Lennart Poettering
for acquiring it again in the reload/stop step
2010-07-07execute: change stdout inherit logic, when run as PID 1 use /dev/nullLennart Poettering
2010-07-05turn negative options into positive optionsLennart Poettering