SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
57,095 Commits 2 Branches 1 Tag
58270534bf5da170ad75b5b41244cd7e761cf660
Commit Graph
6765 Commits
Author SHA1 Message Date
Lennart Poettering 6a79c58603 logind: ignore lid switch if more than 1 display is connected 
Previously we expected the desktop environment to take an inhibitor
lock, but this opened a race on boot-up where logind might already be
running but no DE is active.

Hence, let's move checking for additional displays into logind. This
also opens up this logic for other DEs, given that only GNOME
implemented the inhibitor logic so far.
 2014-03-03 19:32:43 +01:00
Tom Gundersen ae833394d6 man: networkd - mention resolv.conf symlink 2014-03-03 18:25:55 +01:00
Lennart Poettering e66cf1a3f9 core: introduce new RuntimeDirectory= and RuntimeDirectoryMode= unit settings 
As discussed on the ML these are useful to manage runtime directories
below /run for services.
 2014-03-03 17:55:32 +01:00
Zbigniew Jędrzejewski-Szmek 1ae383a8a3 Use /var/run/dbus/system_bus_socket for the D-Bus socket 2014-02-25 21:26:42 -05:00
Lennart Poettering df1e020461 Revert back to /var/run at a couple of problems 
This partially reverts 41a55c46ab

Some specifications we want to stay compatibility actually document
/var/run, not /run, and we should stay compatible with that. In order to
make sure our D-Bus implementation works on any system, regardless if
running systemd or not, we should always use /var/run which is the
only path mandated by the D-Bus spec.

Similar, glibc hardcodes the utmp location to /var/run, and this is
exposed in _UTMP_PATH in limits.h, hence let's stay in sync with this
public API, too.

We simply do not support systems where /var/run is not a symlink → /run.
Hence both are equivalent. Staying compatible with upstream
specifications hence weighs more than cleaning up superficial
appearance.
 2014-02-26 02:47:43 +01:00
Zbigniew Jędrzejewski-Szmek 41a55c46ab Replace /var/run with /run in remaining places 
/run was already used almost everywhere, fix the remaining places
for consistency.
 2014-02-25 20:41:24 -05:00
Lennart Poettering f513e420c8 exec: imply NoNewPriviliges= only when seccomp filters are used in user mode 2014-02-26 02:28:52 +01:00
Lennart Poettering 4298d0b512 core: add new RestrictAddressFamilies= switch 
This new unit settings allows restricting which address families are
available to processes. This is an effective way to minimize the attack
surface of services, by turning off entire network stacks for them.

This is based on seccomp, and does not work on x86-32, since seccomp
cannot filter socketcall() syscalls on that platform.
 2014-02-26 02:19:28 +01:00
Tom Gundersen fe6b2d55bc networkd: add basic support for MACVLANs 2014-02-25 21:19:08 +01:00
Tom Gundersen e3ab0c0e19 man: refer to systemd.net{work,dev}(5) from systemd-networkd(8) 2014-02-25 19:50:26 +01:00
Tom Gundersen eac684ef1c man: split out systemd.net{work,dev}(5) from systemd-networkd(8) 2014-02-25 19:30:40 +01:00
Tom Gundersen 1ff28eaee3 man: split out systemd.link(5) from udev(7) 2014-02-25 17:04:13 +01:00
Tom Gundersen c7f3ba1ecd man: networkd - clarify that multiple addresses/routes are supported 2014-02-25 16:06:45 +01:00
Lennart Poettering c74e630d0c nspawn: add new switch --network-macvlan= to add a macvlan device to the container 2014-02-25 02:37:59 +01:00
Lennart Poettering 085afe36cb core: add global settings for enabling CPUAccounting=, MemoryAccounting=, BlockIOAccounting= for all units at once 2014-02-24 23:50:10 +01:00
Lennart Poettering 8f03fd0891 man: document that per-interface sysctl variables are applied as network interfaces show up 
https://bugzilla.redhat.com/show_bug.cgi?id=1062955
 2014-02-23 16:43:19 +01:00
Lennart Poettering 5556b5fe41 core: clean up some confusing regarding SI decimal and IEC binary suffixes for sizes 
According to Wikipedia it is customary to specify hardware metrics and
transfer speeds to the basis 1000 (SI decimal), while software metrics
and physical volatile memory (RAM) sizes to the basis 1024 (IEC binary).
So far we specified everything in IEC, let's fix that and be more
true to what's otherwise customary. Since we don't want to parse "Mi"
instead of "M" we document each time what the context used is.
 2014-02-23 03:19:04 +01:00
Tom Gundersen 733f7a2c69 udev: net - allow MTU and Speed to be specified with units 
This also changes the names to MTUBytes and BitsPerSecond, respectively. Notice
that the speed was mistakenly documented to be in bytes before this change.
 2014-02-22 18:29:43 +01:00
Lennart Poettering 90060676c4 cgroup: Extend DeviceAllow= syntax to whitelist groups of devices, not just particular devices nodes 2014-02-22 03:05:34 +01:00
Tom Gundersen bf175aafd2 net-util: match on the driver as exposed by ethtool if DRIVER not set 
Also fix a copy-paste error that broke matching on interface name.
 2014-02-21 22:59:29 +01:00
Thomas Hindoe Paaboel Andersen d7c9a162f1 man: networkd typo fixes 2014-02-21 21:00:39 +01:00
Lennart Poettering c8f57f5963 man: suffix networkd config file options with "=" 
That's what we do for all options in the other man pages. It helps
clarifying that these are options that values need to be assigned to.
 2014-02-21 19:22:24 +01:00
Lennart Poettering f7be6ffa92 man: split settings documentaiton in systemd.unit(5) into two sections 2014-02-21 19:22:24 +01:00
Lennart Poettering b8e7a47baf man: don't document ".include" in configuration files anymore as first step to deprecate them one day 2014-02-21 19:22:24 +01:00
Tom Gundersen edbb03e95a .network/.netdev/.link: allow to match on architecture 2014-02-21 16:05:02 +01:00
Lennart Poettering c32acc96ef man: there is no ExecStopPre= for service units 
https://bugs.freedesktop.org/show_bug.cgi?id=73177
 2014-02-21 15:25:04 +01:00
Zbigniew Jędrzejewski-Szmek 6a70f3aa63 man: xinclude pkg-config note 2014-02-20 22:43:27 -05:00
Zbigniew Jędrzejewski-Szmek 4f50d2efba man: xinclude --host/--machine 
As usual, those common options are pushed to the end.
 2014-02-20 22:43:27 -05:00
Zbigniew Jędrzejewski-Szmek 88ae7333ee man: xinclude --user/--system 2014-02-20 22:43:27 -05:00
Zbigniew Jędrzejewski-Szmek dfdebb1b92 man: xinclude --help/--version/--no-pager 2014-02-20 22:43:27 -05:00
Zbigniew Jędrzejewski-Szmek 7c071fda94 build-sys: add conditionals and regenerate manpage list 
The list of man pages is auto generated, based on conditonal='...'
attributes in the man page itself.
 2014-02-20 22:43:27 -05:00
Lennart Poettering 08af0da269 nspawn: when adding a veth interface to a bridge, use the "vb-" rather than "ve-" interface name prefix 
This way we can recognize the interfaces later on to apply different
host-side configuration to them.
 2014-02-21 04:02:12 +01:00
Michael Scherer eef65bf3ee core: Add AppArmor profile switching 
This permit to switch to a specific apparmor profile when starting a daemon. This
will result in a non operation if apparmor is disabled.
It also add a new build requirement on libapparmor for using this feature.
 2014-02-21 03:44:20 +01:00
Lennart Poettering 099524d7b0 core: add new ConditionArchitecture() that checks the architecture returned by uname()'s machine field. 2014-02-21 02:43:14 +01:00
Tom Gundersen a03c5fd2d8 man: networkd/udev - add to [Match] documentation 2014-02-20 23:26:52 +01:00
Tom Gundersen e51660ae56 udev: net-config - allow interface names to be set from the hwdb 2014-02-19 23:29:51 +01:00
Lennart Poettering 14bf87881b man: fix references to .pc files which aren't separate anymore 2014-02-19 18:31:03 +01:00
Lennart Poettering 26e3ff59a6 man: don't advertise sd-daemon as embeddable anymore 
It's now part of libsystemd, and should be used like any other API.
 2014-02-19 18:20:12 +01:00
Thomas Hindoe Paaboel Andersen 17d47d8d2d busctl: add --no-legend and use in bash completion 2014-02-19 17:35:35 +01:00
Thomas Hindoe Paaboel Andersen f5ca75f4a1 man: busctl typo fix 2014-02-19 17:02:45 +01:00
Lennart Poettering b67f562c9c man: document $MAINPID 2014-02-19 03:27:03 +01:00
Lennart Poettering ac45f971a1 core: add Personality= option for units to set the personality for spawned processes 2014-02-19 03:27:03 +01:00
Lennart Poettering 6afc95b736 nspawn: add new --personality= switch to make it easier to run 32bit containers on a 64bit host 2014-02-18 23:37:27 +01:00
Tom Gundersen 9b1c2626ce net-match: fix Driver= match 
It should match on the driver of the parent device.
 2014-02-18 22:34:26 +01:00
Lennart Poettering e9642be2cc seccomp: add helper call to add all secondary archs to a seccomp filter 
And make use of it where appropriate for executing services and for
nspawn.
 2014-02-18 22:14:00 +01:00
Thomas Hindoe Paaboel Andersen 6bebb0add4 machinectl: remove unused --no-ask-password 2014-02-18 21:14:40 +01:00
Thomas Hindoe Paaboel Andersen e56056e93d machinectl: add bash completion 2014-02-18 21:14:30 +01:00
Thomas Hindoe Paaboel Andersen 773e264d13 man: machinectl: there is no command 'kill-machine' 2014-02-18 17:44:03 +01:00
Tom Gundersen 482e2ac193 man: minor fixes to networkd page 
Also enforce that we don't allow setting the Broadcast for IPv6 addresses.
 2014-02-18 15:50:45 +01:00
Jan Engelhardt 38bf2b26bd doc: orthographic corrections 2014-02-18 03:05:19 +01:00