| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-08-19 | core: bypass dynamic user lookups from dbus-daemon | Lennart Poettering | |
| dbus-daemon does NSS name look-ups in order to enforce its bus policy. This might dead-lock if an NSS module use wants to use D-Bus for the look-up itself, like our nss-systemd does. Let's work around this by bypassing bus communication in the NSS module if we run inside of dbus-daemon. To make this work we keep a bit of extra state in /run/systemd/dynamic-uid/ so that we don't have to consult the bus, but can still resolve the names. Note that the normal codepath continues to be via the bus, so that resolving works from all mount namespaces and is subject to authentication, as before. This is a bit dirty, but not too dirty, as dbus daemon is kinda special anyway for PID 1. | |||
| 2016-08-04 | nss-systemd: resolve root/nobody statically | Lennart Poettering | |
| Let's extend nss-systemd to also synthesize user/group entries for the UIDs/GIDs 0 and 65534 which have special kernel meaning. Given that nss-systemd is listed in /etc/nsswitch.conf only very late any explicit listing in /etc/passwd or /etc/group takes precedence. This functionality is useful in minimal container-like setups that lack /etc/passwd files (or only have incompletely populated ones). | |||
| 2016-07-22 | nss: add new "nss-systemd" NSS module for mapping dynamic users | Lennart Poettering | |
| With this NSS module all dynamic service users will be resolvable via NSS like any real user. | |||
 |
index : ~lukeshu/systemd | |
| Unnamed repository; edit this file 'description' to name the repository. | git-mirror |
| summaryrefslogtreecommitdiff |