Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-10-08 | unit: introduce 'banned' load state for units symlinked to /dev/null | Lennart Poettering | |
2010-10-07 | util: unify implementations of freeze() | Lennart Poettering | |
2010-10-07 | util: Adding a strneq, to represent (!strncmp(a, b, n)) | Fabiano Fidencio | |
As we have streq to repesent (strcmp(a, b) == 0),I'm adding strneq to represent (strncmp(a, b, n) == 0), that will be used in umount.c (at least). | |||
2010-10-05 | fix typo: s/seperat/separat/g | Dave Reisner | |
2010-09-21 | manager: measure startup times | Lennart Poettering | |
2010-09-16 | vconsole: add new utility to initialize the virtual console | Lennart Poettering | |
2010-09-15 | util: use waitid() instead of waitpid() everywhere to avoid confusion due to ↵ | Lennart Poettering | |
SIGSTOP | |||
2010-09-15 | util: introduce waitpid_loop() | Lennart Poettering | |
2010-08-25 | systemctl: show timestamps for state changes | Lennart Poettering | |
2010-08-20 | mount: properly handle LABEL="" in fstab | Lennart Poettering | |
2010-08-20 | dbus: follow standardized fdo PropertiesChanged signal spec | Lennart Poettering | |
2010-08-20 | service/systemctl: don't consider LSB exit codes 5 and 6 as failure, and ↵ | Lennart Poettering | |
decode exit codes in systemctl | |||
2010-08-17 | nss: don't disable nscd anymore, since it doesn't make sense to ↵ | Lennart Poettering | |
socket-activate nscd anyway | |||
2010-08-17 | emacs: disable tabs in .h files, too | Lennart Poettering | |
2010-08-16 | systemctl: add support for delayed shutdown, similar to sysv in style | Lennart Poettering | |
2010-08-11 | main: disable nscd properly, if possible | Lennart Poettering | |
2010-08-11 | gc: remove a lot of unused code | Lennart Poettering | |
2010-08-11 | selinux: split off selinux calls into seperate file label.c | Lennart Poettering | |
2010-08-11 | systemctl: beef up highlighting of service states a little | Lennart Poettering | |
2010-08-03 | Systemd is causing mislabeled devices to be created and then attempting to ↵ | Daniel J Walsh | |
read them. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/28/2010 05:57 AM, Kay Sievers wrote: > On Wed, Jul 28, 2010 at 11:43, Lennart Poettering > <lennart@poettering.net> wrote: >> On Mon, 26.07.10 16:42, Daniel J Walsh (dwalsh@redhat.com) wrote: >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:7): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:8): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> >>> Lennart, we talked about this earlier. I think this is caused by the >>> modprobe calls to create /dev/autofs. Since udev is not created at the >>> point that init loads the kernel modules, the devices get created with >>> the wrong label. Once udev starts the labels get fixed. >>> >>> I can allow init_t to read device_t chr_files. >> >> Hmm, I think a cleaner fix would be to make systemd relabel this device >> properly before accessing it? Given that this is only one device this >> should not be a problem for us to maintain, I think? How would the >> fixing of the label work? Would we have to spawn restorecon for this, or >> can we actually do this in C without too much work? > > I guess we can just do what udev is doing, and call setfilecon(), with > a context of an earlier matchpathcon(). > > Kay > _______________________________________________ > systemd-devel mailing list > systemd-devel@lists.freedesktop.org > http://lists.freedesktop.org/mailman/listinfo/systemd-devel Here is the updated patch with a fix for the labeling of /dev/autofs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkxQMyoACgkQrlYvE4MpobNviACfWgxsjW2xzz1qznFex8RVAQHf gIEAmwRmRcLvGqYtwQaZ3WKIg8wmrwNk =pC2e | |||
2010-07-20 | device: do not merge devices | Lennart Poettering | |
Don't try to merge devices that have been created via dependencies when they appear in the system and can be recognized as the same. Instead, simply continue to maintain them independently of each other, however with the same state cycle. Why? Because otherwise we'd have a hard time to seperate the dependencies after the devices are unplugged again and we hence cannot be sure anymore that next time the device is plugged in it will carry the same names. Example: if one depndency refers to dev-sda.device and another one to dev-by-id-xxxyyy.device we only learn at time of plug in of the device that it is actually the same device that was ment. In the moment the device is unplugged again we won't know anymore their relation to each other and the next time the harddisk is plugged it might even appear as dev-by-id-xxxyyy.device and dev-sdb.service. To ensure the dependencies continue to have the meaning they were intended to have let's hence keep the .device objects seperate all the time, even when they are plugged in. This patch also introduces a new Following= property which points from the various .device units of a specific device to the main .device unit for it. This can be used by the client side to figure out the relation of the .device units to each other and even filter units from display. | |||
2010-07-12 | cgroup: reimplement the last bit of libcgroup functionality natively | Lennart Poettering | |
2010-07-10 | execute: add ability to configure the kill signal | Lennart Poettering | |
2010-07-08 | install: various improvements | Lennart Poettering | |
Rename --start to --realize, to make things less confusing when doing "systemctl stop --realize foo.service". Introduce --realize=reload. Don't talk to systemd when run within a chroot, or when systemd isn't running. | |||
2010-07-08 | cgls: beef up control group dumping and introduce cgls tool | Lennart Poettering | |
2010-07-08 | execute: support minimal environment variable replacement when executing ↵ | Lennart Poettering | |
processes | |||
2010-07-07 | util: introduce cunescape_length() | Lennart Poettering | |
2010-07-07 | util: implement safe_atolu based on safe_atolli/safe_atoi, depending on word ↵ | Lennart Poettering | |
size | |||
2010-07-07 | main: show welcome message on boot | Lennart Poettering | |
2010-07-07 | manager: optionally print status updates to console on boot | Lennart Poettering | |
2010-07-05 | systemctl: show cgroup contents in status | Lennart Poettering | |
2010-07-05 | systemctl: implement 'status' command | Lennart Poettering | |
2010-07-04 | dbus: complete exec coverage | Lennart Poettering | |
2010-07-01 | socket: make various socket/pipe options configurable | Lennart Poettering | |
2010-07-01 | core: rename struct timestamp to dual_timestamp to avoid name clash with IP ↵ | Lennart Poettering | |
system headers | |||
2010-06-23 | pam: dont use $XDG_SESSION_COOKIE since CK wants that to be secret. Come up ↵ | Lennart Poettering | |
with our own $XDG_SESSION_ID based on /proc/self/sessionid if that is available | |||
2010-06-21 | pam: implement systemd PAM module and generelize cgroup API for that a bit | Lennart Poettering | |
2010-06-18 | install: make systemd-install useful for installation of template instances | Lennart Poettering | |
2010-06-18 | systemctl: add /dev/initctl fallback | Lennart Poettering | |
2010-06-18 | systemctl: warn users via wall that the system goes down | Lennart Poettering | |
2010-06-17 | manager: expose a few special units via SIGRTMIN+x signals | Lennart Poettering | |
2010-06-17 | util: implement parse_pid() function | Lennart Poettering | |
2010-06-16 | service: optionally call into PAM when dropping priviliges | Lennart Poettering | |
2010-06-16 | util: introduce random_ull() | Lennart Poettering | |
2010-06-16 | util: introduce readlink_and_make_absolute() | Lennart Poettering | |
2010-05-24 | path: add .path unit type for monitoring files | Lennart Poettering | |
2010-05-24 | timer: fully implement timer units | Lennart Poettering | |
2010-05-22 | manager: canonicalize search paths and filter out non-existing paths and ↵ | Lennart Poettering | |
those pointing to the same fs directory | |||
2010-05-22 | execute: only reset those signals to the default we really need to reset to ↵ | Lennart Poettering | |
the default | |||
2010-05-18 | main: ignore EPERM in TIOCSTTY when opening terminal for crash shell | Lennart Poettering | |