Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-08-12 | main: log build time features on startup | Lennart Poettering | |
2010-08-12 | dbus: downgrade a few log messages | Lennart Poettering | |
2010-08-12 | dbus: fix capability serialization | Lennart Poettering | |
2010-08-12 | conf-parser: don't crash if an assignment is read before a section header | Lennart Poettering | |
2010-08-11 | main: disable nscd properly, if possible | Lennart Poettering | |
2010-08-11 | dbus: properly pass capabilities | Lennart Poettering | |
2010-08-11 | gc: remove a lot of unused code | Lennart Poettering | |
2010-08-11 | selinux: split off selinux calls into seperate file label.c | Lennart Poettering | |
2010-08-11 | pahole: rearrange structs to make them smaller | Lennart Poettering | |
2010-08-11 | clang: fix numerous little issues found with clang-analyzer | Lennart Poettering | |
2010-08-11 | manager: serialize/deserialize startup time, too | Lennart Poettering | |
2010-08-11 | audit: remove double header inclusion | Lennart Poettering | |
2010-08-11 | audit: initialize audit only if it is enabled | Lennart Poettering | |
2010-08-11 | target: don't synthesize a runlevel property for targets anymore since we ↵ | Lennart Poettering | |
don't need it anymore and it is crutfy | |||
2010-08-11 | audit: smaller fixes to audit hookup | Lennart Poettering | |
2010-08-11 | systemctl: beef up highlighting of service states a little | Lennart Poettering | |
2010-08-11 | utmp: enable systemd-update-utmp by default | Lennart Poettering | |
2010-08-11 | unit: make sure a job for a service of type 'finish' succeeds if the process ↵ | Lennart Poettering | |
terminates cleanly | |||
2010-08-11 | socket: disable GC for pre-allocated per-connection service until it is used | Lennart Poettering | |
2010-08-11 | audit,utmp: implement audit logic and rip utmp stuff out of the main daemon ↵ | Lennart Poettering | |
and into a helper binary | |||
2010-08-11 | util: when replacing env vars replace unset envvars by nothing | Lennart Poettering | |
This makes it easier to support /etc/sysconfig/xxxx with command line env vars in style of $OPTIONS which might or might not be set. | |||
2010-08-11 | conf: add commented default SysVConsole= value | Lennart Poettering | |
2010-08-11 | unit: rename OnlyByDependency= to RefuseManualStart= and introduce ↵ | Lennart Poettering | |
RefuseManualStop= Some unit shall never be start on user request (e.g. shutdown.target) others never be stopped on user request (e.g. auditd.servce), hence offer options for both. | |||
2010-08-09 | main: fix auto restarting of units after a configuration reload | Lennart Poettering | |
2010-08-09 | swap: properly enter maintenance mode on failure | Lennart Poettering | |
2010-08-09 | manager: when two pending jobs conflict, keep the one that "conflicts", ↵ | Lennart Poettering | |
remove the one that is "conflicted" This gives the writer of units control which unit is kept and which is stopped when two units conflict. | |||
2010-08-09 | service: hide output of sysv scripts if quiet is passed on the kernel cmdline | Lennart Poettering | |
2010-08-09 | service: properly remember if a sysv is actually enabled | Lennart Poettering | |
Previously we checked the SysV priority value to figure out if a SysV unit was enabled or not, since th value was mostly read from the S startup links. Since we read this value from the LSB headers as a fallback we hence ended up considering a lot more services enabled than were actually enabled. This patch adds an explicit boolean which encodes whether a sysv service is enabled or not via S links. https://bugzilla.redhat.com/show_bug.cgi?id=615293 | |||
2010-08-09 | service: show restart value in dump | Lennart Poettering | |
2010-08-09 | dbus: don't call bus_path_escape() with NULL unit name | Lennart Poettering | |
Fixes an assertion triggerable via D-Bus. https://bugzilla.redhat.com/show_bug.cgi?id=622008 | |||
2010-08-09 | systemctl: show exit code only if it is actually set | Lennart Poettering | |
2010-08-07 | systemctl: fix parsing of DBus reply in 'dot' | Michal Schmidt | |
"systemctl dot" has been broken since the addition of the "Following=" property. | |||
2010-08-06 | util: when formatting timestamps return '0' for 0 timestamps instead of ↵ | Lennart Poettering | |
empty string | |||
2010-08-06 | sd-daemon: fix compilation on old systems lacking SOCK_CLOEXEC | Lennart Poettering | |
2010-08-06 | device: properly handle devices that are referenced before they show up | Lennart Poettering | |
2010-08-06 | cgroup: if the system bus cannot be found, send cgroup empty msg directly to ↵ | Lennart Poettering | |
init proces | |||
2010-08-06 | manager: downgrade a few log msgs regarding conflicting but fixable jobs | Lennart Poettering | |
2010-08-06 | automount: order automount units after fsck, too | Lennart Poettering | |
2010-08-06 | units: split fsck.target from sysinit.target for suse compat | Lennart Poettering | |
2010-08-06 | main: automatically spawn a getty on the kernel configured serial console | Lennart Poettering | |
2010-08-05 | manager: fix conflicting job check | Lennart Poettering | |
2010-08-05 | manager: when breaking ordering cycle show full cycle loop | Lennart Poettering | |
2010-08-05 | service: read special startup dirs only on the respective distros | Lennart Poettering | |
2010-08-05 | selinux: minor error handling fix | Lennart Poettering | |
2010-08-05 | service: always sort services from suse B runlevel before services from ↵ | Lennart Poettering | |
normal runlevels | |||
2010-08-05 | reboot: handle -p switch properly | Michal Schmidt | |
https://bugzilla.redhat.com/show_bug.cgi?id=618678 | |||
2010-08-05 | selinux: fix labels only when configured for it | Lennart Poettering | |
2010-08-04 | selinux: rework selinux tests a little | Lennart Poettering | |
2010-08-04 | selinux: fix if vs. ifdef mixup | Lennart Poettering | |
2010-08-03 | Systemd is causing mislabeled devices to be created and then attempting to ↵ | Daniel J Walsh | |
read them. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 07/28/2010 05:57 AM, Kay Sievers wrote: > On Wed, Jul 28, 2010 at 11:43, Lennart Poettering > <lennart@poettering.net> wrote: >> On Mon, 26.07.10 16:42, Daniel J Walsh (dwalsh@redhat.com) wrote: >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:7): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> type=1400 audit(1280174589.476:8): avc: denied { read } for pid=1 >>> comm="systemd" name="autofs" dev=devtmpfs ino=9482 >>> scontext=system_u:system_r:init_t:s0 >>> tcontext=system_u:object_r:device_t:s0 tclass=chr_file >>> >>> Lennart, we talked about this earlier. I think this is caused by the >>> modprobe calls to create /dev/autofs. Since udev is not created at the >>> point that init loads the kernel modules, the devices get created with >>> the wrong label. Once udev starts the labels get fixed. >>> >>> I can allow init_t to read device_t chr_files. >> >> Hmm, I think a cleaner fix would be to make systemd relabel this device >> properly before accessing it? Given that this is only one device this >> should not be a problem for us to maintain, I think? How would the >> fixing of the label work? Would we have to spawn restorecon for this, or >> can we actually do this in C without too much work? > > I guess we can just do what udev is doing, and call setfilecon(), with > a context of an earlier matchpathcon(). > > Kay > _______________________________________________ > systemd-devel mailing list > systemd-devel@lists.freedesktop.org > http://lists.freedesktop.org/mailman/listinfo/systemd-devel Here is the updated patch with a fix for the labeling of /dev/autofs -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkxQMyoACgkQrlYvE4MpobNviACfWgxsjW2xzz1qznFex8RVAQHf gIEAmwRmRcLvGqYtwQaZ3WKIg8wmrwNk =pC2e |