summaryrefslogtreecommitdiff
path: root/src/core/namespace.h
Commit message (Expand)AuthorAgeFilesLines
* core: rename "mount_flags" → "mount_propagation_flag" internally where appr...Lennart Poettering2023-03-141-1/+1
* namespace: Modernize shareable namespace functionsDaan De Meyer2023-03-131-2/+2
* core/namespace: mount new sysfs when new network namespace is requestedYu Watanabe2023-02-231-0/+1
* core/namespace: drop unused field in NamespaceInfoYu Watanabe2023-02-231-1/+0
* namespace-util: add namespace_infoChristian Brauner2022-10-041-12/+1
* core: support ExtensionDirectories in user managerLuca Boccassi2022-03-101-0/+1
* core: add ExtensionDirectories= settingLuca Boccassi2022-01-211-0/+1
* core: make DynamicUser=1 and StateDirectory= work with TemporaryFileSystem=/v...Luca Boccassi2021-10-271-0/+1
* Revert "Revert "Mount all fs nosuid when NoNewPrivileges=yes""Yu Watanabe2021-06-251-0/+1
* Revert "Mount all fs nosuid when NoNewPrivileges=yes"Topi Miettinen2021-06-151-1/+0
* Mount all fs nosuid when NoNewPrivileges=yesTopi Miettinen2021-05-261-0/+1
* execute: drop DissectImageFlags parameter from namespace_setup()Lennart Poettering2021-03-161-1/+0
* Remount /dev/mqueue in unshared mount namespace for PrivateIPCXℹ Ruoyao2021-03-041-0/+1
* Refactor network namespace specific functions in generic helpersXℹ Ruoyao2021-03-041-2/+2
* Add ExtensionImages directive to form overlaysLuca Boccassi2021-02-231-1/+11
* tree-wide: return NULL from freeing functionsZbigniew Jędrzejewski-Szmek2021-02-161-2/+2
* tree-wide: use -EINVAL for enum invalid valuesZbigniew Jędrzejewski-Szmek2021-02-101-5/+5
* New directives NoExecPaths= ExecPaths=Topi Miettinen2021-01-291-0/+2
* core: make NotifyAccess= in combination with RootDirectory=/RootImage= workLennart Poettering2021-01-201-0/+1
* core: add DBUS method to bind mount new nodes without service restartLuca Boccassi2021-01-181-0/+2
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
* core/namespace: drop bitfield annotations from boolean fieldsZbigniew Jędrzejewski-Szmek2020-09-221-13/+13
* core: hide /run/credentials whenever namespacing is requestedLennart Poettering2020-08-251-0/+1
* core: introduce ProtectProc= and ProcSubset= to expose hidepid= and subset= p...Lennart Poettering2020-08-241-0/+24
* namespace: move protect_{home|system} into NamespaceInfoLennart Poettering2020-08-241-2/+2
* core: add mount options support for MountImagesLuca Boccassi2020-08-201-0/+1
* core: cleanup unused variablesLuca Boccassi2020-08-201-1/+0
* core: new feature MountImagesLuca Boccassi2020-08-051-0/+13
* service: add new RootImageOptions featureLuca Boccassi2020-07-291-0/+1
* pid1: create ro private tmp dirs when /tmp or /var/tmp is read-onlyZbigniew Jędrzejewski-Szmek2020-07-141-0/+12
* core: add RootHashSignature service parameterLuca Boccassi2020-06-251-0/+3
* core: add RootHash and RootVerity service parametersLuca Boccassi2020-06-231-0/+4
* core: add new LogNamespace= execution settingLennart Poettering2020-01-311-0/+1
* core: ProtectKernelLogs= mask kmsg in proc and sysKevin Kuehler2019-11-141-0/+1
* tree-wide: some more [static] related fixesLennart Poettering2019-07-121-2/+2
* pid1: improve message when setting up namespace failsZbigniew Jędrzejewski-Szmek2019-05-221-1/+2
* namespace: when DynamicUser=1 is set, mount StateDirectory= bind mounts "nosuid"Lennart Poettering2019-03-251-0/+1
* core: add open_netns_path() helperLennart Poettering2019-03-071-0/+1
* core: ProtectHostname= featureTopi Miettinen2019-02-201-0/+1
* tree-wide: use c99 static for array size declarationsZbigniew Jędrzejewski-Szmek2019-01-041-1/+1
* namespace: drop protect_{home,system}_or_bool_from_string()Yu Watanabe2018-06-151-2/+0
* tree-wide: beautify remaining copyright statementsLennart Poettering2018-06-141-1/+1
* tree-wide: remove Lennart's copyright linesLennart Poettering2018-06-141-1/+0
* tree-wide: drop 'This file is part of systemd' blurbLennart Poettering2018-06-141-2/+0
* core: add new PrivateMounts= unit settingLennart Poettering2018-06-121-0/+1
* namespace: rename parse_protect_{home,system}_or_bool() to protect_{home,syst...Yu Watanabe2018-05-311-2/+2
* tree-wide: be more careful with the type of array sizesLennart Poettering2018-04-271-6/+6
* tree-wide: drop license boilerplateZbigniew Jędrzejewski-Szmek2018-04-061-13/+0
* core: add new option 'tmpfs' to ProtectHome=Yu Watanabe2018-02-211-0/+1
* core: add new setting TemporaryFileSystem=Yu Watanabe2018-02-211-0/+12