Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | bus-proxy: read the right policy when running in user mode | Lennart Poettering | 2014-06-10 | 1 | -1/+1 |
| | |||||
* | core: rename ReadOnlySystem= to ProtectSystem= and add a third value for ↵ | Lennart Poettering | 2014-06-04 | 1 | -2/+2 |
| | | | | | | | | | | also mounting /etc read-only Also, rename ProtectedHome= to ProtectHome=, to simplify things a bit. With this in place we now have two neat options ProtectSystem= and ProtectHome= for protecting the OS itself (and optionally its configuration), and for protecting the user's data. | ||||
* | bus-proxy: drop priviliges if we can | Lennart Poettering | 2014-06-04 | 1 | -2/+4 |
| | | | | | | Either become uid/gid of the client we have been forked for, or become the "systemd-bus-proxy" user if the client was root. We retain CAP_IPC_OWNER so that we can tell kdbus we are actually our own client. | ||||
* | core: enable PrivateNetwork= for a number of our long running services where ↵ | Lennart Poettering | 2014-03-19 | 1 | -0/+1 |
| | | | | this is useful | ||||
* | units: make use of PrivateTmp=yes and PrivateDevices=yes for all our ↵ | Lennart Poettering | 2014-03-19 | 1 | -0/+2 |
| | | | | long-running daemons | ||||
* | units: limit caps for bus proxyd and driverd services | Lennart Poettering | 2013-12-23 | 1 | -0/+1 |
| | |||||
* | bus: send status message from proxyd to systemd about client we are working for | Lennart Poettering | 2013-12-21 | 1 | -1/+5 |
| | |||||
* | bus: fix typo in systemd-bus-proxyd | Kay Sievers | 2013-12-16 | 1 | -1/+1 |
| | |||||
* | bus: install systemd-bus-proxyd unit files for compatibility with dbus1 | Lennart Poettering | 2013-12-13 | 1 | -0/+12 |