Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-06-10 | bus-proxy: read the right policy when running in user mode | Lennart Poettering | |
2014-06-04 | core: rename ReadOnlySystem= to ProtectSystem= and add a third value for ↵ | Lennart Poettering | |
also mounting /etc read-only Also, rename ProtectedHome= to ProtectHome=, to simplify things a bit. With this in place we now have two neat options ProtectSystem= and ProtectHome= for protecting the OS itself (and optionally its configuration), and for protecting the user's data. | |||
2014-06-04 | bus-proxy: drop priviliges if we can | Lennart Poettering | |
Either become uid/gid of the client we have been forked for, or become the "systemd-bus-proxy" user if the client was root. We retain CAP_IPC_OWNER so that we can tell kdbus we are actually our own client. | |||
2014-03-19 | core: enable PrivateNetwork= for a number of our long running services where ↵ | Lennart Poettering | |
this is useful | |||
2014-03-19 | units: make use of PrivateTmp=yes and PrivateDevices=yes for all our ↵ | Lennart Poettering | |
long-running daemons | |||
2013-12-23 | units: limit caps for bus proxyd and driverd services | Lennart Poettering | |
2013-12-21 | bus: send status message from proxyd to systemd about client we are working for | Lennart Poettering | |
2013-12-16 | bus: fix typo in systemd-bus-proxyd | Kay Sievers | |
2013-12-13 | bus: install systemd-bus-proxyd unit files for compatibility with dbus1 | Lennart Poettering | |