Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-08-22 | core: do not fail at step SECCOMP if there is no kernel support (#4004) | Felipe Sateler | |
Fixes #3882 | |||
2016-06-01 | core: add pre-defined syscall groups to SystemCallFilter= (#3053) (#3157) | Topi Miettinen | |
Implement sets of system calls to help constructing system call filters. A set starts with '@' to distinguish from a system call. Closes: #3053, #3157 | |||
2016-02-10 | tree-wide: remove Emacs lines from all files | Daniel Mack | |
This should be handled fine now by .dir-locals.el, so need to carry that stuff in every file. | |||
2015-12-06 | shared: include what we use | Thomas Hindoe Paaboel Andersen | |
The next step of a general cleanup of our includes. This one mostly adds missing includes but there are a few removals as well. | |||
2014-12-12 | seccomp-util.h: make sure seccomp-util.h can be included alone | Lennart Poettering | |
2014-02-18 | seccomp: add helper call to add all secondary archs to a seccomp filter | Lennart Poettering | |
And make use of it where appropriate for executing services and for nspawn. | |||
2014-02-13 | core: add SystemCallArchitectures= unit setting to allow disabling of non-native | Lennart Poettering | |
architecture support for system calls Also, turn system call filter bus properties into complex types instead of concatenated strings. |