Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-02-11 | Revert "units: add SecureBits" | Lennart Poettering | |
This reverts commit 6a716208b346b742053cfd01e76f76fb27c4ea47. Apparently this doesn't work. http://lists.freedesktop.org/archives/systemd-devel/2015-February/028212.html | |||
2015-02-11 | units: add SecureBits | Topi Miettinen | |
No setuid programs are expected to be executed, so add SecureBits=noroot noroot-locked to unit files. | |||
2015-01-22 | importd: run daemon at minimal capabilities | Lennart Poettering | |
2015-01-22 | import: introduce new mini-daemon systemd-importd, and make machinectl a ↵ | Lennart Poettering | |
client to it The old "systemd-import" binary is now an internal tool. We still use it as asynchronous backend for systemd-importd. Since the import tool might require some IO and CPU resources (due to qcow2 explosion, and decompression), and because we might want to run it with more minimal priviliges we still keep it around as the worker binary to execute as child process of importd. machinectl now has verbs for pulling down images, cancelling them and listing them. |