~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2014-06-19	units: add missing caps so that GetAddresses() can work	Lennart Poettering

2014-06-06	units: fix minor typo	Lennart Poettering

2014-06-04	core: rename ReadOnlySystem= to ProtectSystem= and add a third value for ↵	Lennart Poettering
	also mounting /etc read-only Also, rename ProtectedHome= to ProtectHome=, to simplify things a bit. With this in place we now have two neat options ProtectSystem= and ProtectHome= for protecting the OS itself (and optionally its configuration), and for protecting the user's data.
2014-06-03	core: add new ReadOnlySystem= and ProtectedHome= settings for service units	Lennart Poettering
	ReadOnlySystem= uses fs namespaces to mount /usr and /boot read-only for a service. ProtectedHome= uses fs namespaces to mount /home and /run/user inaccessible or read-only for a service. This patch also enables these settings for all our long-running services. Together they should be good building block for a minimal service sandbox, removing the ability for services to modify the operating system or access the user's private data.
2014-03-19	core: enable PrivateNetwork= for a number of our long running services where ↵	Lennart Poettering
	this is useful
2014-03-19	units: make use of PrivateTmp=yes and PrivateDevices=yes for all our ↵	Lennart Poettering
	long-running daemons
2013-12-23	units: systemd-machined now exits on idle and we shouldn't try to restart it ↵	Lennart Poettering
	then
2013-12-11	event: hook up sd-event with the service watchdog logic	Lennart Poettering
	Adds a new call sd_event_set_watchdog() that can be used to hook up the event loop with the watchdog supervision logic of systemd. If enabled and $WATCHDOG_USEC is set the event loop will ping the invoking systemd daemon right after coming back from epoll_wait() but not more often than $WATCHDOG_USEC/4. The epoll_wait() will sleep no longer than $WATCHDOG_USEC/4*3, to make sure the service manager is called in time. This means that setting WatchdogSec= in a .service file and calling sd_event_set_watchdog() in your daemon is enough to hook it up with the watchdog logic.
2013-07-19	machined: run machined at minimal capabilities	Lennart Poettering

2013-07-19	units: add references to bus API documentation to logind+machined	Lennart Poettering

2013-07-02	machined: split out machine registration stuff from logind	Lennart Poettering
	Embedded folks don't need the machine registration stuff, hence it's nice to make this optional. Also, I'd expect that machinectl will grow additional commands quickly, for example to join existing containers and suchlike, hence it's better keeping that separate from loginctl.