~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2014-06-04	bus-proxy: drop priviliges if we can	Lennart Poettering
	Either become uid/gid of the client we have been forked for, or become the "systemd-bus-proxy" user if the client was root. We retain CAP_IPC_OWNER so that we can tell kdbus we are actually our own client.
2014-06-03	shared: capability - don't loop over the cap bits if they are all unset	Tom Gundersen

2014-06-03	shared: allow drop_priviliges to drop all privs	Tom Gundersen

2014-06-01	timesyncd: split privilege dropping code out of timesyncd so that we can ↵	Lennart Poettering
	make use of it from other daemons too This is preparation to make networkd work as unpriviliged user.
2014-05-18	timesyncd: run timesyncd as unpriviliged user "systemd-timesync" (but still ↵	Lennart Poettering
	with CAP_SYS_TIME)
2014-01-02	Introduce cleanup functions for cap_free	Zbigniew Jędrzejewski-Szmek
	Unfortunately a different cleanup function is necessary per type, because cap_t and char are incompatible with void**.
2013-12-25	bus: rename message "serial" to "cookie"	Lennart Poettering
	Even if the lower-leveld dbus1 protocol calls it "serial", let's expose the word "cookie" for this instead, as this is what kdbus uses and since it doesn't imply monotonicity the same way "serial" does.
2013-12-17	__thread --> thread_local for C11 compat	Shawn Landden
	Also make thread_local available w/o including <threads.h>. (as the latter hasn't been implemented, but this part is trivial)
2013-04-03	util: rename write_one_line_file() to write_string_file()	Lennart Poettering
	You can write much more than just one line with this call (and we frequently do), so let's correct the naming.
2013-02-14	honor SELinux labels, when creating and writing config files	Harald Hoyer
	Also split out some fileio functions to fileio.c and provide a SELinux aware pendant in fileio-label.c see https://bugzilla.redhat.com/show_bug.cgi?id=881577
2012-05-29	capabilities: when dropping capabilities system-wide also drop them from ↵	Lennart Poettering
	usermode helpers This hooks things up with /proc/sys/kernel/usermodehelper/bset and /proc/sys/kernel/usermodehelper/inheritable.
2012-05-24	main: add configuration option to alter capability bounding set for PID 1	Lennart Poettering
	This also ensures that caps dropped from the bounding set are also dropped from the inheritable set, to be extra-secure. Usually that should change very little though as the inheritable set is empty for all our uses anyway.
2012-04-12	relicense to LGPLv2.1 (with exceptions)	Lennart Poettering
	We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends.
2012-04-10	util: move all to shared/ and split external dependencies in separate ↵	Kay Sievers
	internal libraries Before: $ ldd /lib/systemd/systemd-timestamp linux-vdso.so.1 => (0x00007fffb05ff000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f90aac57000) libcap.so.2 => /lib64/libcap.so.2 (0x00007f90aaa53000) librt.so.1 => /lib64/librt.so.1 (0x00007f90aa84a000) libc.so.6 => /lib64/libc.so.6 (0x00007f90aa494000) /lib64/ld-linux-x86-64.so.2 (0x00007f90aae90000) libdl.so.2 => /lib64/libdl.so.2 (0x00007f90aa290000) libattr.so.1 => /lib64/libattr.so.1 (0x00007f90aa08a000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f90a9e6e000) After: $ ldd systemd-timestamp linux-vdso.so.1 => (0x00007fff3cbff000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f5eaa1c3000) librt.so.1 => /lib64/librt.so.1 (0x00007f5ea9fbb000) libc.so.6 => /lib64/libc.so.6 (0x00007f5ea9c04000) /lib64/ld-linux-x86-64.so.2 (0x00007f5eaa3fc000) libdl.so.2 => /lib64/libdl.so.2 (0x00007f5ea9a00000) libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f5ea97e4000)