summaryrefslogtreecommitdiff
path: root/src/core/namespace.c
Commit message (Expand)AuthorAgeFilesLines
* core:sandbox: lets make /lib/modules/ inaccessible on ProtectKernelModules=Djalal Harouni2016-10-121-17/+37
* core:namespace: simplify ProtectHome= implementationDjalal Harouni2016-09-251-22/+53
* core: simplify ProtectSystem= implementationDjalal Harouni2016-09-251-58/+113
* core:sandbox: add more /proc/* entries to ProtectKernelTunables=Djalal Harouni2016-09-251-0/+11
* core:namespace: simplify mount calculationDjalal Harouni2016-09-251-12/+34
* core:namespace: put paths protected by ProtectKernelTunables= inDjalal Harouni2016-09-251-19/+35
* core:namespace: minor improvements to append_mounts()Djalal Harouni2016-09-251-4/+4
* namespace: drop all mounts outside of the new root directoryLennart Poettering2016-09-251-0/+26
* namespace: don't make the root directory of a namespace a mount if it already...Lennart Poettering2016-09-251-3/+8
* namespace: chase symlinks for mounts to set up in userspaceLennart Poettering2016-09-251-42/+76
* namespace: invoke unshare() only after checking all parametersLennart Poettering2016-09-251-3/+3
* core: introduce ProtectSystem=strictLennart Poettering2016-09-251-9/+47
* namespace: add some debug logging when enforcing InaccessiblePaths=Lennart Poettering2016-09-251-3/+4
* namespace: rework how ReadWritePaths= is appliedLennart Poettering2016-09-251-23/+43
* namespace: when enforcing fs namespace restrictions suppress redundant mountsLennart Poettering2016-09-251-0/+39
* namespace: simplify mount_path_compare() a bitLennart Poettering2016-09-251-11/+9
* namespace: make sure InaccessibleDirectories= masks all mounts further downLennart Poettering2016-09-251-4/+40
* core: add two new service settings ProtectKernelTunables= and ProtectControlG...Lennart Poettering2016-09-251-4/+32
* Merge pull request #3764 from poettering/assorted-stuff-2Martin Pitt2016-07-221-1/+1
|\
| * namespace: add a (void) castLennart Poettering2016-07-201-1/+1
* | namespace: fix wrong return value from mount(2) (#3758)Topi Miettinen2016-07-201-1/+2
|/
* namespace: minor improvementsLennart Poettering2016-07-201-8/+5
* doc,core: Read{Write,Only}Paths= and InaccessiblePaths=Alessandro Puccetti2016-07-191-9/+9
* namespace: unify limit behavior on non-directory pathsAlessandro Puccetti2016-07-191-8/+23
* namespace: Make private /dev noexec and readonly (#3263)topimiettinen2016-05-151-3/+7
* namespace: unmount old /dev under our new private /dev (#3254)topimiettinen2016-05-141-0/+2
* Remove kdbus custom endpoint supportDaniel Mack2016-02-111-84/+1
* tree-wide: remove Emacs lines from all filesDaniel Mack2016-02-101-2/+0
* util-lib: split out allocation calls into alloc-util.[ch]Lennart Poettering2015-10-271-0/+1
* user-util: move UID/GID related macros from macro.h to user-util.hLennart Poettering2015-10-271-0/+1
* util-lib: split out umask-related code to umask-util.hLennart Poettering2015-10-271-0/+1
* util-lib: move string table stuff into its own string-table.[ch]Lennart Poettering2015-10-271-0/+1
* util-lib: move mount related utility calls to mount-util.[ch]Lennart Poettering2015-10-271-0/+1
* socket-util: move remaining socket-related calls from util.[ch] to socket-uti...Lennart Poettering2015-10-261-0/+1
* util-lib: split out fd-related operations into fd-util.[ch]Lennart Poettering2015-10-251-1/+2
* util-lib: split our string related calls from util.[ch] into its own file str...Lennart Poettering2015-10-241-10/+11
* tree-wide: port more code to use send_one_fd() and receive_one_fd()Lennart Poettering2015-09-291-33/+11
* tree-wide: update empty-if coccinelle script to cover empty-while and moreLennart Poettering2015-09-091-2/+1
* tree-wide: make use of log_error_errno() return value in more casesLennart Poettering2015-09-091-6/+6
* tree-wide: make use of log_error_errno() return valueLennart Poettering2015-09-091-2/+1
* util: introduce CMSG_FOREACH() macro and make use of it everywhereLennart Poettering2015-06-101-2/+1
* core/namespace: Protect /usr instead of /home with ProtectSystem=yesJason Pleau2015-05-311-1/+1
* nspawn: finish user namespace supportLennart Poettering2015-05-211-1/+1
* core,nspawn: unify code that moves the root dirLennart Poettering2015-05-201-16/+0
* core: Private*/Protect* options with RootDirectoryAlban Crequy2015-05-181-10/+70
* nspawn: rework custom mount point order, and add support for overlayfsLennart Poettering2015-05-131-1/+1
* nspawn: change filesystem type from "bind" to NULL in mount() syscallsIago López Galeiras2015-03-311-1/+1
* core/namespace: fix path sortingMichal Schmidt2015-03-161-8/+4
* core: explicitly ignore failure during cleanupZbigniew Jędrzejewski-Szmek2015-03-131-1/+1
* core: either ignore or handle mount failuresZbigniew Jędrzejewski-Szmek2015-03-131-4/+7
View Lorry Controller Status