Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-08-02 | exec: introduce PrivateNetwork= process option to turn off network access to ↵ | Lennart Poettering | |
specific services | |||
2011-08-01 | execute: properly enforce group | Lennart Poettering | |
https://bugzilla.redhat.com/show_bug.cgi?id=723892 | |||
2011-08-01 | umask: change default umask to 0022 just to be sure, and set it explicitly ↵ | Lennart Poettering | |
in all binaries, in order to make sure it is set when started from the terminal | |||
2011-07-23 | util: make use of get_user_creds() and get_group_creds() wherever applicable | Lennart Poettering | |
2011-07-23 | util: user parse_uid() wherever applicable | Lennart Poettering | |
2011-07-01 | nspawn: Move the get_user_creds from execute.c to utils.c for later usage in ↵ | Michal Vyskocil | |
nspawn.c. | |||
2011-06-30 | execute: properly pass PAM environment to executed process | Lennart Poettering | |
2011-06-30 | execute: fix PAM error checking | Lennart Poettering | |
2011-06-30 | execute: invoke sigwait() in a loop when waiting for PAM parent, to avoid ↵ | Lennart Poettering | |
spurious wake-ups | |||
2011-06-30 | execute: don't invoke pam_setcred, since we are not running on a tty where ↵ | Lennart Poettering | |
the user could change his password | |||
2011-06-30 | execute: do initgroups() first, pam initialization second so that it can ↵ | Lennart Poettering | |
still modify the groups list | |||
2011-06-30 | exec: add ControlGroupModify= switch to allow changing access mode to cgroups fs | Lennart Poettering | |
2011-06-28 | execute: don't choke when systemd was compiled with a different CAP_LAST_CAP ↵ | Lennart Poettering | |
then what it is run with | |||
2011-05-18 | exec: hangup/reset/deallocate VTs in gettys | Lennart Poettering | |
Explicitly disconnect all clients from a VT when a getty starts/finishes (requires TIOCVHANGUP, available in 2.6.29). Explicitly deallocate getty VTs in order to flush scrollback buffer. Explicitly reset terminals to a defined state before spawning getty. | |||
2011-04-19 | execute: when we run as PID 1 the kernel doesn't give us CAP_SETPCAP by ↵ | Lennart Poettering | |
default. Get that temporarily when dropping capabilities for good | |||
2011-04-12 | execute: don't fail if we cannot fix OOM in a container | Lennart Poettering | |
2011-04-06 | service: fix units with more than one socket | Lennart Poettering | |
https://bugzilla.redhat.com/show_bug.cgi?id=693289 | |||
2011-03-31 | log: fix shifting of facilities | Lennart Poettering | |
2011-03-31 | src: our lord is coverity | Lennart Poettering | |
2011-03-29 | exec: drop process group kill mode since it has little use and confuses the user | Lennart Poettering | |
2011-03-18 | exec: properly apply capability bounding set, add inverted bounding sets | Lennart Poettering | |
2011-03-17 | def: centralize definition of default timeout in one place | Lennart Poettering | |
2011-03-14 | core: move abstract namespace sockets to /dev/.run | Lennart Poettering | |
Now that we have /dev/.run there's no need to use abstract namespace sockets. So, let's move things to /dev/.run, to make things more easily discoverable and improve compat with chroot() and fs namespacing. | |||
2011-03-04 | execute: load environment files at time of execution, not when we load the ↵ | Lennart Poettering | |
service configuration https://bugzilla.redhat.com/show_bug.cgi?id=661282 | |||
2011-03-03 | kill: always send SIGCONT after SIGTERM | Lennart Poettering | |
When we kill a process to terminate it make sure to send SIGCONT to ensure it is unpaused and processes the signal. | |||
2011-02-28 | Spelling Corrections | Harald Hoyer | |
Just some lame spelling corrections with no functionality. | |||
2011-02-15 | execute: optionally forward program output to /dev/console in addition to ↵ | Lennart Poettering | |
syslog/kmsg | |||
2011-01-18 | execute: make sending of SIGKILL on shutdown optional | Lennart Poettering | |
2011-01-06 | execute,util: fix two small memory leaks | Lennart Poettering | |
2011-01-06 | execute: drop empty assignments from env blocks on execution but keep them ↵ | Lennart Poettering | |
around otherwise to make them visible | |||
2010-11-15 | exec: automatically determine right TERM= setting based on tty name | Lennart Poettering | |
2010-10-22 | systemctl: introduce systemctl kill | Lennart Poettering | |
2010-10-13 | unit: add minimal condition checker for unit startup | Lennart Poettering | |
2010-10-08 | service: optionally, create INIT_PROCESS/DEAD_PROCESS entries for a service | Lennart Poettering | |
This should fix accounting for pam_limits and suchlike. https://bugzilla.redhat.com/show_bug.cgi?id=636036 | |||
2010-10-07 | util: never use sizeof(sa_family_t) when calculating sockaddr sizes | Lennart Poettering | |
2010-08-31 | exec: replace OOMAdjust= by OOMScoreAdjust= to follow new kernel interface | Lennart Poettering | |
This replaces OOMAdjust= by OOMScoreAdjust= in the config files, breaking compatibility with older unit files. However, this keeps compat with older kernels which lack the new OOM rework. | |||
2010-08-30 | exec: make sure O_NONBLOCK is off for all sockets passed as STDIN/STDOUT/STDERR | Lennart Poettering | |
2010-08-20 | service/systemctl: don't consider LSB exit codes 5 and 6 as failure, and ↵ | Lennart Poettering | |
decode exit codes in systemctl | |||
2010-08-14 | emacs: make sure nobody accidently adds tabs to our sources | Lennart Poettering | |
2010-08-11 | clang: fix numerous little issues found with clang-analyzer | Lennart Poettering | |
2010-07-14 | socket: don't close sockets when activating per-connection units | Lennart Poettering | |
2010-07-12 | execute: inherit from original input, not the fixed up | Lennart Poettering | |
2010-07-12 | execute: reword comment | Lennart Poettering | |
2010-07-12 | execute: close inherited fds earlier | Lennart Poettering | |
2010-07-11 | execute: use right logger socket | Lennart Poettering | |
2010-07-10 | execute: add ability to configure the kill signal | Lennart Poettering | |
2010-07-08 | execute: support minimal environment variable replacement when executing ↵ | Lennart Poettering | |
processes | |||
2010-07-08 | execute: if the main process of a service already owns the TTY, don't wait ↵ | Lennart Poettering | |
for acquiring it again in the reload/stop step | |||
2010-07-07 | execute: change stdout inherit logic, when run as PID 1 use /dev/null | Lennart Poettering | |
2010-07-05 | turn negative options into positive options | Lennart Poettering | |