Łukasz Stelmach 8144537a81 core: make mount(8) and swapon(8) inherit SMACK label from systemd ...

By default mount(8), umount(8), swapon(8) and swapoff(8) should run with
with the SMACK label inherited from systemd rather than the default one
meant for services.

Fixes: aa5ae9711e
Follow-up-for: 20bbf5ee4c

2024-10-30 17:41:23 +01:00

..

bpf

bpf-socket-bind: fix unexpected behavior with either 0 allow or deny rules

2024-03-24 11:08:58 +00:00

all-units.h

…

apparmor-setup.c

…

apparmor-setup.h

…

audit-fd.c

…

audit-fd.h

…

automount.c

tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros (#34893)

2024-10-26 07:10:22 +09:00

automount.h

…

bpf-devices.c

basic/linux: update kernel headers from v6.10-rc3

2024-06-20 02:35:35 +09:00

bpf-devices.h

…

bpf-firewall.c

core/cgroup: call bpf_firewall_close in cgroup_runtime_free

2024-06-28 15:38:56 +02:00

bpf-firewall.h

core/cgroup: call bpf_firewall_close in cgroup_runtime_free

2024-06-28 15:38:56 +02:00

bpf-foreign.c

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

bpf-foreign.h

…

bpf-restrict-fs.c

bpf: add helper to translate kernel error codes from libbpf

2024-05-29 08:29:47 +02:00

bpf-restrict-fs.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

bpf-restrict-ifaces.c

fdset: optionally, close remaining fds asynchronously

2024-10-17 09:48:05 +02:00

bpf-restrict-ifaces.h

core: rename restrict-ifaces.[ch] → bpf-restrict-ifaces.[ch]

2024-01-25 16:11:33 +01:00

bpf-socket-bind.c

fdset: optionally, close remaining fds asynchronously

2024-10-17 09:48:05 +02:00

bpf-socket-bind.h

bpf-socket-bind: rename bpf_serialize_socket_bind() → bpf_socket_bind_serialize()

2024-01-25 16:11:33 +01:00

bpf-util.c

tree-wise: several cleanups for logging

2024-05-01 04:41:06 +09:00

bpf-util.h

…

cgroup.c

core/cgroup: rename CGROUP_PRESSURE_WATCH_ON/OFF -> CGROUP_PRESSURE_WATCH_YES/NO

2024-10-27 03:04:35 +09:00

cgroup.h

core/cgroup: rename CGROUP_PRESSURE_WATCH_ON/OFF -> CGROUP_PRESSURE_WATCH_YES/NO

2024-10-27 03:04:35 +09:00

clock-warp.c

manager: add structured log message about clock bump

2024-06-15 16:54:37 +02:00

clock-warp.h

manager: apply clock epoch on updates too

2024-06-15 16:20:16 +02:00

core-varlink.c

cgroup: Add ManagedOOMMemoryPressureDurationSec= override setting for units

2024-10-16 20:12:38 -07:00

core-varlink.h

core: reliably check if varlink socket has been deserialized

2024-07-23 19:38:57 +02:00

crash-handler.c

crash-handler: Add back notice log message

2024-08-26 16:36:39 +02:00

crash-handler.h

…

dbus-automount.c

…

dbus-automount.h

…

dbus-cgroup.c

Merge pull request #34787 from yuwata/core-ip-address-allow-deny

2024-10-21 16:35:49 +02:00

dbus-cgroup.h

…

dbus-device.c

…

dbus-device.h

…

dbus-execute.c

cgroup: Add support for ProtectControlGroups= private and strict

2024-10-28 08:37:36 -07:00

dbus-execute.h

manager: switch service unit type over to using new handoff timestamping logic

2024-04-25 13:40:41 +02:00

dbus-job.c

core: switch j->unit->manager to j->manager

2024-04-18 20:25:39 +08:00

dbus-job.h

…

dbus-kill.c

…

dbus-kill.h

…

dbus-manager.c

Merge pull request #34679 from DaanDeMeyer/bus-log

2024-10-09 11:42:26 +02:00

dbus-manager.h

…

dbus-mount.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-mount.h

…

dbus-path.c

…

dbus-path.h

…

dbus-scope.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-scope.h

…

dbus-service.c

core: move debug logging from _can_live_mount() functions to caller

2024-10-16 10:50:15 +02:00

dbus-service.h

…

dbus-slice.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-slice.h

…

dbus-socket.c

core: Use RateLimit struct to store ratelimits

2024-08-14 14:18:40 +02:00

dbus-socket.h

…

dbus-swap.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-swap.h

…

dbus-target.c

…

dbus-target.h

…

dbus-timer.c

timer: introduce DeferReactivation setting

2024-10-11 22:54:16 +02:00

dbus-timer.h

…

dbus-unit.c

core/cgroup: drop allow_cache parameter in unit_get_io_accounting()

2024-09-21 05:45:36 +02:00

dbus-unit.h

…

dbus-util.c

core/dbus: add assertions

2024-10-09 06:57:11 +09:00

dbus-util.h

core/dbus: introduce bus_verify_manage_units_async_impl()

2024-10-09 06:55:32 +09:00

dbus.c

core/dbus: move bus_verify_xyz() to dbus-util.c

2024-10-09 06:54:45 +09:00

dbus.h

core/dbus: move bus_verify_xyz() to dbus-util.c

2024-10-09 06:54:45 +09:00

device.c

tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros (#34893)

2024-10-26 07:10:22 +09:00

device.h

core/device: prefix DEVICE_FOUND_MASK with '_'

2024-07-21 22:48:52 +02:00

dynamic-user.c

Drop support for nscd

2024-06-28 18:51:56 +02:00

dynamic-user.h

…

efi-random.c

…

efi-random.h

…

emergency-action.c

terminal-util: split out color macros/helpers into its own header

2024-07-19 11:44:04 +02:00

emergency-action.h

core: refuse invalid emergency actions for SuccessAction= and friends in user service manager

2024-05-18 02:51:34 +09:00

exec-credential.c

core/dbus-service: refuse bind mounting over /run/credentials/

2024-08-17 18:16:20 +02:00

exec-credential.h

core/dbus-service: refuse bind mounting over /run/credentials/

2024-08-17 18:16:20 +02:00

exec-invoke.c

core: add EXEC_DIRECTORY_TYPE_SHALL_CHOWN() helper

2024-10-30 13:33:29 +01:00

exec-invoke.h

…

execute-serialize.c

core: Refactor ProtectControlGroups= to use enum vs bool

2024-10-28 06:42:53 -07:00

execute-serialize.h

…

execute.c

core: add EXEC_DIRECTORY_TYPE_SHALL_CHOWN() helper

2024-10-30 13:33:29 +01:00

execute.h

core: add EXEC_DIRECTORY_TYPE_SHALL_CHOWN() helper

2024-10-30 13:33:29 +01:00

executor.c

core: clean up ambient capability logging

2024-07-31 21:40:28 +02:00

fuzz-execute-serialize.c

Add ExtraFileDescriptor property to StartTransientUnit dbus API

2024-10-07 09:01:48 -07:00

fuzz-manager-serialize.c

…

fuzz-manager-serialize.options

…

fuzz-unit-file.c

…

fuzz-unit-file.options

…

generator-setup.c

generator-setup: use RET_GATHER()

2024-05-29 11:52:40 +02:00

generator-setup.h

…

ima-setup.c

…

ima-setup.h

…

import-creds.c

core/import-creds: use proc_cmdline_get_bool()

2024-07-13 22:58:23 +02:00

import-creds.h

…

ipe-setup.c

core: load IPE policy on boot

2024-10-02 18:29:43 +02:00

ipe-setup.h

core: load IPE policy on boot

2024-10-02 18:29:43 +02:00

job.c

core: do BindMount/MountImage operations in async control process

2024-08-29 12:48:55 +01:00

job.h

core: Clean up includes a little

2024-08-14 14:18:40 +02:00

kill.c

Fix confusion between killer and prey

2024-06-19 16:22:23 +02:00

kill.h

various: move const ptr indicator to return value

2024-06-19 16:28:28 +02:00

kmod-setup.c

use FOREACH_ELEMENT

2024-04-18 17:39:34 +02:00

kmod-setup.h

…

load-dropin.c

tree-wide: use strv_extend_strv_consume() where appropriate

2024-09-21 00:53:50 +02:00

load-dropin.h

core/unit: do not use unit path cache in unit_need_daemon_reload()

2024-08-09 19:25:42 +09:00

load-fragment-gperf-nulstr.awk

…

load-fragment-gperf.gperf.in

core: Refactor ProtectControlGroups= to use enum vs bool

2024-10-28 06:42:53 -07:00

load-fragment.c

core: Refactor ProtectControlGroups= to use enum vs bool

2024-10-28 06:42:53 -07:00

load-fragment.h

core: Refactor ProtectControlGroups= to use enum vs bool

2024-10-28 06:42:53 -07:00

main.c

path-lookup: deduplicate xdg_user_*() with sd_path_lookup()

2024-10-06 19:27:12 +02:00

main.h

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

manager-dump.c

meson: Start adding devel and rc suffixes to the project version

2024-02-14 15:36:34 +01:00

manager-dump.h

…

manager-serialize.c

core/manager-serialize: drop serialization for Manager.ready_sent

2024-10-11 10:36:08 +02:00

manager-serialize.h

…

manager.c

core: modernize askpw handling a bit

2024-10-21 14:12:24 +02:00

manager.h

core: modernize askpw handling a bit

2024-10-21 14:12:24 +02:00

meson.build

core: load IPE policy on boot

2024-10-02 18:29:43 +02:00

mount.c

core: make mount(8) and swapon(8) inherit SMACK label from systemd

2024-10-30 17:41:23 +01:00

mount.h

Revert "core/credential,mount: re-read /proc/self/mountinfo before invoking umount command"

2024-06-12 00:54:26 +01:00

namespace.c

cgroup: Add support for ProtectControlGroups= private and strict

2024-10-28 08:37:36 -07:00

namespace.h

cgroup: Add support for ProtectControlGroups= private and strict

2024-10-28 08:37:36 -07:00

org.freedesktop.systemd1.conf

…

org.freedesktop.systemd1.policy.in

…

org.freedesktop.systemd1.service

…

path.c

path: drop IN_ATTRIB from parent directory watches

2024-07-08 11:58:15 +02:00

path.h

…

scope.c

core: do BindMount/MountImage operations in async control process

2024-08-29 12:48:55 +01:00

scope.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

selinux-access.c

core/selinux-access: use empty_to_na where appropriate

2024-05-02 13:36:52 +08:00

selinux-access.h

…

selinux-setup.c

selinux: kill mac_selinux_free()

2024-06-12 15:21:21 +02:00

selinux-setup.h

…

service.c

core/service: support sd_notify() MAINPIDFD=1 and MAINPIDFDID=

2024-10-29 18:42:15 +01:00

service.h

core/service: place occurrences of SERVICE_MOUNTING closer to reload states

2024-10-22 19:19:47 +02:00

show-status.c

pid1: use $COLUMNS info in status_vprintf()

2024-07-19 11:44:05 +02:00

show-status.h

…

slice.c

core/slice: simplify slice_freezer_action a bit

2024-07-17 17:25:23 +02:00

slice.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

smack-setup.c

…

smack-setup.h

…

socket.c

socket: support setting ownership of message queues

2024-10-28 23:40:42 +01:00

socket.h

core: honor FileDescriptorName= too for Accept=yes sockets

2024-08-26 15:40:15 +02:00

swap.c

core: make mount(8) and swapon(8) inherit SMACK label from systemd

2024-10-30 17:41:23 +01:00

swap.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

system.conf.in

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

systemd.pc.in

…

taint.c

taint: Add taint_strv() to get taints as an array

2024-08-14 14:18:40 +02:00

taint.h

taint: Add taint_strv() to get taints as an array

2024-08-14 14:18:40 +02:00

target.c

core: use FOREACH_ARRAY at 3 more places

2024-04-10 23:40:53 +08:00

target.h

…

timer.c

timer: introduce DeferReactivation setting

2024-10-11 22:54:16 +02:00

timer.h

timer: introduce DeferReactivation setting

2024-10-11 22:54:16 +02:00

transaction.c

terminal-util: split out color macros/helpers into its own header

2024-07-19 11:44:04 +02:00

transaction.h

…

unit-dependency-atom.c

…

unit-dependency-atom.h

…

unit-printf.c

core: use strdup_to()

2024-03-20 15:18:21 +01:00

unit-printf.h

…

unit-serialize.c

tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros (#34893)

2024-10-26 07:10:22 +09:00

unit-serialize.h

…

unit.c

Merge pull request #34799 from YHNdnzj/service-followups

2024-10-24 19:44:10 +02:00

unit.h

core: clean up errors for live mounting

2024-10-22 19:52:24 +02:00

user.conf.in

…