~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2016-08-22	seccomp: make sure getrlimit() is among the default permitted syscalls	Lennart Poettering
	A lot of basic code wants to know the stack size, and it is safe if they do, hence let's permit getrlimit() (but not setrlimit()) by default. See: #3970
2016-06-13	core: improve seccomp syscall grouping a bit	Lennart Poettering
	This adds three new seccomp syscall groups: @keyring for kernel keyring access, @cpu-emulation for CPU emulation features, for exampe vm86() for dosemu and suchlike, and @debug for ptrace() and related calls. Also, the @clock group is updated with more syscalls that alter the system clock. capset() is added to @privileged, and pciconfig_iobase() is added to @raw-io. Finally, @obsolete is a cleaned up. A number of syscalls that never existed on Linux and have no number assigned on any architecture are removed, as they only exist in the man pages and other operating sytems, but not in code at all. create_module() is moved from @module to @obsolete, as it is an obsolete system call. mem_getpolicy() is removed from the @obsolete list, as it is not obsolete, but simply a NUMA API.
2016-06-01	core: add pre-defined syscall groups to SystemCallFilter= (#3053) (#3157)	Topi Miettinen
	Implement sets of system calls to help constructing system call filters. A set starts with '@' to distinguish from a system call. Closes: #3053, #3157
2016-02-10	tree-wide: remove Emacs lines from all files	Daniel Mack
	This should be handled fine now by .dir-locals.el, so need to carry that stuff in every file.
2015-12-06	shared: include what we use	Thomas Hindoe Paaboel Andersen
	The next step of a general cleanup of our includes. This one mostly adds missing includes but there are a few removals as well.
2015-11-16	tree-wide: sort includes	Thomas Hindoe Paaboel Andersen
	Sort the includes accoding to the new coding style.
2015-10-24	util-lib: split our string related calls from util.[ch] into its own file ↵	Lennart Poettering
	string-util.[ch] There are more than enough calls doing string manipulations to deserve its own files, hence do something about it. This patch also sorts the #include blocks of all files that needed to be updated, according to the sorting suggestions from CODING_STYLE. Since pretty much every file needs our string manipulation functions this effectively means that most files have sorted #include blocks now. Also touches a few unrelated include files.
2014-02-18	seccomp: add helper call to add all secondary archs to a seccomp filter	Lennart Poettering
	And make use of it where appropriate for executing services and for nspawn.
2014-02-13	core: add SystemCallArchitectures= unit setting to allow disabling of non-native	Lennart Poettering
	architecture support for system calls Also, turn system call filter bus properties into complex types instead of concatenated strings.