Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | start work on testsdefault_memory | Chris Down | 2019-04-03 | 1 | -0/+77 |
| | |||||
* | make defaultmemorylow only affect subtree | Chris Down | 2019-04-03 | 1 | -6/+2 |
| | |||||
* | temp | Chris Down | 2019-04-03 | 7 | -8/+74 |
| | |||||
* | kernel-install: add a check that the vmlinuz arg is sane | Zbigniew Jędrzejewski-Szmek | 2019-04-03 | 1 | -0/+5 |
| | |||||
* | docs: update release steps for meson | Zbigniew Jędrzejewski-Szmek | 2019-04-03 | 1 | -8/+10 |
| | |||||
* | build-sys: bump package versionv242-rc2 | Zbigniew Jędrzejewski-Szmek | 2019-04-03 | 1 | -1/+1 |
| | |||||
* | Merge pull request #12121 from poettering/contribv242-rc1 | Zbigniew Jędrzejewski-Szmek | 2019-04-03 | 3 | -4/+45 |
|\ | |||||
| * | update NEWS | Lennart Poettering | 2019-04-02 | 1 | -0/+22 |
| | | |||||
| * | meson: bump so versions | Lennart Poettering | 2019-04-02 | 1 | -2/+2 |
| | | | | | | | | | | Since we aren't quite ready for release v242 yet, let's not bump the package version yet, but let's already bump the soversion. | ||||
| * | NEWS: add preliminary contributor list | Lennart Poettering | 2019-04-02 | 1 | -1/+18 |
| | | |||||
| * | update .mailmap | Lennart Poettering | 2019-04-02 | 1 | -0/+2 |
| | | |||||
* | | docs: fix path to unit files | Lennart Poettering | 2019-04-03 | 1 | -11/+11 |
| | | |||||
* | | core: fix build failure if seccomp is disabled | Davide Cavalca | 2019-04-03 | 1 | -1/+1 |
| | | |||||
* | | Revert "build: install /etc/systemd/{system,user}-generators" | Lennart Poettering | 2019-04-02 | 2 | -4/+0 |
| | | | | | | | | This reverts commit 509276f2b7d44d472b66e79cbfa531c1de4c3801. | ||||
* | | Merge pull request #12188 from poettering/coccinelle-fixlets | Yu Watanabe | 2019-04-03 | 14 | -140/+76 |
|\ \ | |/ |/| | tree-wide: let's run coccinelle again | ||||
| * | udev: use strempty() where appropriate | Lennart Poettering | 2019-04-02 | 1 | -2/+1 |
| | | |||||
| * | json: use SYNTHETIC_ERRNO() where appropriate | Lennart Poettering | 2019-04-02 | 1 | -44/+22 |
| | | |||||
| * | sd-event: use DIV_ROUND_UP where appropriate | Lennart Poettering | 2019-04-02 | 1 | -1/+1 |
| | | |||||
| * | sd-device: use xsprintf() where appropriate | Lennart Poettering | 2019-04-02 | 1 | -1/+1 |
| | | |||||
| * | tree-wide: use SYNTHETIC_ERRNO() where appropriate | Lennart Poettering | 2019-04-02 | 3 | -67/+36 |
| | | |||||
| * | boot: use TAKE_PTR() where appropriate | Lennart Poettering | 2019-04-02 | 2 | -16/+8 |
| | | |||||
| * | tree-wide: use reallocarray() where appropriate | Lennart Poettering | 2019-04-02 | 2 | -2/+2 |
| | | |||||
| * | util-lib: use FLAGS_SET() where appropriate | Lennart Poettering | 2019-04-02 | 2 | -3/+3 |
| | | |||||
| * | analyze: use empty_or_root() where appropriate | Lennart Poettering | 2019-04-02 | 1 | -4/+2 |
| | | |||||
* | | Merge pull request #12056 from poettering/seccomp-suid-sgid | Lennart Poettering | 2019-04-02 | 28 | -30/+466 |
|\ \ | | | | | | | Introduce RestrictSUIDSGID= for disabling SUID/SGID file creation | ||||
| * | | update TODO | Lennart Poettering | 2019-04-02 | 1 | -3/+0 |
| | | | |||||
| * | | core: imply NNP and SUID/SGID restriction for DynamicUser=yes service | Lennart Poettering | 2019-04-02 | 5 | -10/+33 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Let's be safe, rather than sorry. This way DynamicUser=yes services can neither take benefit of, nor create SUID/SGID binaries. Given that DynamicUser= is a recent addition only we should be able to get away with turning this on, even though this is strictly speaking a binary compatibility breakage. | ||||
| * | | units: turn on RestrictSUIDSGID= in most of our long-running daemons | Lennart Poettering | 2019-04-02 | 11 | -1/+12 |
| | | | |||||
| * | | man: document the new RestrictSUIDSGID= setting | Lennart Poettering | 2019-04-02 | 2 | -12/+30 |
| | | | |||||
| * | | analyze: check for RestrictSUIDSGID= in "systemd-analyze security" | Lennart Poettering | 2019-04-02 | 1 | -0/+12 |
| | | | | | | | | | | | | | | | And let's give it a heigh weight, since it pretty much can be used for bad things only. | ||||
| * | | core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID= | Lennart Poettering | 2019-04-02 | 6 | -6/+36 |
| | | | |||||
| * | | test: add test case for restrict_suid_sgid() | Lennart Poettering | 2019-04-02 | 1 | -0/+208 |
| | | | |||||
| * | | seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for ↵ | Lennart Poettering | 2019-04-02 | 2 | -0/+133 |
| | | | | | | | | | | | | suid/sgid files | ||||
| * | | seccomp: add debug messages to seccomp_protect_hostname() | Lennart Poettering | 2019-04-02 | 1 | -2/+6 |
|/ / | |||||
* | | core: add a generic helper that forwards per-unit method calls from Manager | Lennart Poettering | 2019-04-02 | 1 | -135/+51 |
| | | | | | | | | | | | | | | Quite often we have a method DoSomethingWithUnit() on the Manager object that is the same as a function DoSomething() on a Unit object. Let's shorten things by introducing a common function that forwards the former to the latter, instead of writing this again and again. | ||||
* | | Merge pull request #12013 from yuwata/fix-switchroot-11997 | Zbigniew Jędrzejewski-Szmek | 2019-04-02 | 8 | -13/+94 |
|\ \ | |/ |/| | core: on switching root do not emit device state change based on enumeration results | ||||
| * | test: add a testcase for device plugged -> dead -> plugged bug | Yu Watanabe | 2019-03-15 | 3 | -0/+62 |
| | | |||||
| * | core: add Manager::honor_device_enumeration flag | Yu Watanabe | 2019-03-15 | 3 | -1/+26 |
| | | | | | | | | | | | | | | | | When system manager is started first time or after switching root, then the udev's device tag data do not exist yet. So, let's not honor the enumeration results. Fixes #11997. | ||||
| * | core: use TAKE_PTR() at few more places | Yu Watanabe | 2019-03-15 | 1 | -3/+2 |
| | | |||||
| * | core: use _cleanup_free_ attribute and free_and_replace() macro in ↵ | Yu Watanabe | 2019-03-15 | 1 | -9/+4 |
| | | | | | | | | method_switch_root() | ||||
* | | Merge pull request #12185 from poettering/login-unstore-fd | Zbigniew Jędrzejewski-Szmek | 2019-04-02 | 2 | -76/+66 |
|\ \ | | | | | | | logind: remove unused fds from fdstore | ||||
| * | | logind: when we cannot attach a passed fd to a device, close it | Lennart Poettering | 2019-04-02 | 1 | -61/+61 |
| | | | | | | | | | | | | Replaces: #8532 | ||||
| * | | logind: simplify removal of device fds | Lennart Poettering | 2019-04-02 | 1 | -15/+5 |
| | | | | | | | | | | | | | | | | | | let's use sd_notifyf(). Let's also stop validating the session ID here. This is the destructor. if it contains a dash, we are already too late here anyway. | ||||
* | | | Merge pull request #12186 from poettering/lgtm-updates | Zbigniew Jędrzejewski-Szmek | 2019-04-02 | 2 | -3/+22 |
|\ \ \ | | | | | | | | | lgtm ruleset updates | ||||
| * | | | test: stop using dup() needlessly | Lennart Poettering | 2019-04-02 | 1 | -1/+2 |
| | | | | |||||
| * | | | lgtm: beef up list of dangerous/questionnable API calls not to make | Lennart Poettering | 2019-04-02 | 1 | -2/+20 |
| |/ / | |||||
* | | | Merge pull request #12183 from poettering/askpwargv | Zbigniew Jędrzejewski-Szmek | 2019-04-02 | 1 | -27/+34 |
|\ \ \ | | | | | | | | | tty-ask-password: let's copy argv[] before forking | ||||
| * | | | tty-ask-password: re-break comment | Lennart Poettering | 2019-04-02 | 1 | -6/+4 |
| | | | | |||||
| * | | | tty-ask-password: simplify signal handler installation | Lennart Poettering | 2019-04-02 | 1 | -6/+7 |
| | | | | |||||
| * | | | tty-ask-password: no need to initialize something already NUL initialized to NUL | Lennart Poettering | 2019-04-02 | 1 | -1/+0 |
| | | | |