summaryrefslogtreecommitdiff
path: root/src/core/namespace.c
Commit message (Expand)AuthorAgeFilesLines
* nulstr-util: Declare NULSTR_FOREACH() iterator inlineDaan De Meyer2022-11-111-1/+1
* namespace: Add hidepid/subset support checkDaan De Meyer2022-11-011-6/+41
* portable: allow caller to override extension-release name checkLuca Boccassi2022-10-121-1/+1
* namespace-util: add namespace_infoChristian Brauner2022-10-041-0/+1
* tree-wide: drop unused reference to DecryptedImageYu Watanabe2022-09-181-2/+1
* tree-wide: use dissected_image_relinquish()Yu Watanabe2022-09-181-10/+5
* dissect-image: use backing_file stored in LoopDevice object to generate image...Yu Watanabe2022-09-071-1/+0
* Use original filename for extension name checkKai Lueke2022-09-061-0/+1
* dissect-image: introduce dissect_loop_device() which takes LoopDevice objectYu Watanabe2022-09-031-5/+2
* loop-util: rework how we lock loopback block devicesLennart Poettering2022-09-011-6/+1
* dissect: drop partition removal codeLennart Poettering2022-09-011-1/+0
* Drop the limit on number of inodes for /devFranck Bui2022-08-191-1/+1
* glibc: Remove #include <linux/fs.h> to resolve fsconfig_command/mount_attr co...Rudi Heitbaum2022-07-241-0/+2
* mac: rework labelling code to be simpler, and less racyLennart Poettering2022-07-081-3/+3
* namespace: fix propagated error numberLennart Poettering2022-07-081-1/+1
* tree-wide: allow ASCII fallback for → in logsDavid Tardon2022-06-281-2/+5
* Add sys/file.h for LOCK_Pavel Zhukov2022-06-211-0/+1
* dissect-image: Explicitly remove partitions when done with imageDaan De Meyer2022-05-231-0/+1
* devnum-util: define helper macros for formatting devnum major/minor pairsLennart Poettering2022-04-131-2/+3
* tree-wide: take BSD lock on loopback devices we dissect/mount/operate onLennart Poettering2022-04-101-0/+14
* core: fix dm-verity auto-discovery in MountImageUnit()Luca Boccassi2022-04-071-1/+1
* core/namespace: inline one more iterator variableYu Watanabe2022-03-231-7/+5
* strv: make iterator in STRV_FOREACH() declaread in the loopYu Watanabe2022-03-191-6/+0
* list: declare iterator of LIST_FOREACH() in the loopYu Watanabe2022-03-191-1/+0
* core: support ExtensionDirectories in user managerLuca Boccassi2022-03-101-4/+5
* core: support MountAPIVFS and RootDirectory in user managerLuca Boccassi2022-03-101-3/+20
* core: create parent directory for mount point of ExtensionDirectoriesLuca Boccassi2022-03-091-3/+3
* core: don't fail on EEXIST when creating mount pointLuca Boccassi2022-01-311-1/+1
* core: add clearer debug log when setting up ExecDirectories symlinks failsLuca Boccassi2022-01-271-1/+1
* Merge pull request #22203 from brauner/2022-01-21.procsubset.pidLuca Boccassi2022-01-241-3/+15
|\
| * core/namespace: s/normalize_mounts()/drop_unused_mounts()Christian Brauner2022-01-241-3/+10
| * core/namespace: allow using ProtectSubset=pid and ProtectHostname=true togetherChristian Brauner2022-01-241-0/+5
* | core: add ExtensionDirectories= settingLuca Boccassi2022-01-211-12/+118
|/
* core: refuse to mount ExtensionImages if the base layer doesn't at least have...Luca Boccassi2022-01-191-0/+2
* namespace: allow overriding /run with a TemporaryFileSystem=Topi Miettinen2021-12-111-1/+1
* namespace: allow ProcSubset=pid with some ProtectKernel optionsTopi Miettinen2021-11-271-8/+34
* extension-release.d/: add a new field SYSEXT_SCOPE= for clarifying what a sys...Lennart Poettering2021-11-231-1/+1
* tree-wide: port various places over to open_mkdir_at()Lennart Poettering2021-11-171-7/+10
* shared: clean up mkdir.h/label.h situationLennart Poettering2021-11-161-1/+1
* namespace: make tmp dir handling code independent of umask tooLennart Poettering2021-11-121-5/+7
* namespace: make whole namespace_setup() work regardless of configured umaskLennart Poettering2021-11-121-3/+4
* namespace: rebreak a few commentsLennart Poettering2021-11-121-16/+14
* core: make DynamicUser=1 and StateDirectory= work with TemporaryFileSystem=/v...Luca Boccassi2021-10-271-1/+35
* basic: spit out chase_symlinks() from fs-util.[ch] → chase-symlinks.[ch]Lennart Poettering2021-10-051-1/+1
* dissect-image: load embedded verity signature info from imageLennart Poettering2021-09-281-0/+7
* tree-wide: mark set-but-not-used variables as unused to make LLVM happyFrantisek Sumsal2021-09-151-1/+1
* Merge pull request #20257 from bluca/seqnoLuca Boccassi2021-08-311-0/+1
|\
| * dissect: use DISKSEQ when waiting for block devicesLuca Boccassi2021-07-281-0/+1
* | tree-wide: port everything over to new sd-id128 compund literal blissLennart Poettering2021-08-201-2/+1
* | Drop the text argument from assert_not_reached()Zbigniew Jędrzejewski-Szmek2021-08-031-3/+3
|/