Luca Boccassi 23b0bd230b core: set pids.max=0 before sending SIGKILL to cgroup ...

When doing the final SIGKILL when stopping units ensure no more
processes can be created by setting pids.max=0 in the cgroup.

2026-06-20 10:53:04 +01:00

..

all-units.h

…

apparmor-setup.c

clang-tidy: Fix all remaining misc-include-cleaner violations

2025-11-22 10:19:41 +01:00

apparmor-setup.h

…

audit-fd.c

…

audit-fd.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

automount.c

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

automount.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

bpf-bind-iface.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

bpf-bind-iface.h

Add support for binding a unit to a network iface

2025-12-24 07:37:58 +01:00

bpf-devices.c

tree-wide: make more use of stat_verify_device_node()

2026-04-13 13:20:43 +02:00

bpf-devices.h

…

bpf-firewall.c

many: fix remaining check-pointer-deref issues

2026-04-12 15:27:15 +02:00

bpf-firewall.h

…

bpf-foreign.c

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

bpf-foreign.h

…

bpf-restrict-fs.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

bpf-restrict-fs.h

…

bpf-restrict-fsaccess.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

bpf-restrict-fsaccess.h

core: expose internal helpers for test-bpf-restrict-fsaccess

2026-05-13 10:36:12 +02:00

bpf-restrict-ifaces.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

bpf-restrict-ifaces.h

…

bpf-socket-bind.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

bpf-socket-bind.h

…

cgroup.c

oomd: ruleset parsing

2026-05-18 21:42:56 +02:00

cgroup.h

oomd: ruleset parsing

2026-05-18 21:42:56 +02:00

clock-warp.c

…

clock-warp.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

core-forward.h

core: add RestrictFileSystemAccess= BPF LSM for dm-verity execution enforcement

2026-05-13 10:36:12 +02:00

crash-handler.c

tree-wide: Use pidref_wait_for_terminate_and_check()

2025-12-20 15:50:47 +01:00

crash-handler.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

dbus-automount.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-automount.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-cgroup.c

oomd: ruleset parsing

2026-05-18 21:42:56 +02:00

dbus-cgroup.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-device.c

…

dbus-device.h

…

dbus-execute.c

core/dbus-execute: propagate oom in property_get_cpu_affinity

2026-05-18 12:29:12 +02:00

dbus-execute.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-job.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-job.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-kill.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-kill.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-manager.c

core: add KExecsCount property

2026-06-19 19:36:01 +01:00

dbus-manager.h

core/dbus-manager: drop dangling verify_run_space_and_log() prototype

2025-12-18 17:37:26 +01:00

dbus-mount.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-mount.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-path.c

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

dbus-path.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-scope.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-scope.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-service.c

core: add LUOSession= unit setting

2026-06-17 13:11:15 +01:00

dbus-service.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-slice.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-slice.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-socket.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-socket.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-swap.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-swap.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-target.c

…

dbus-target.h

…

dbus-timer.c

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

dbus-timer.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-unit.c

core/dbus-unit: query sender uid only once, validate unit uid early

2026-02-26 14:23:23 +01:00

dbus-unit.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

dbus-util.c

core/dbus-util: several cleanups for bus_read_mount_options()

2026-01-19 17:49:29 +01:00

dbus-util.h

core: change mount options settings so that last defined wins

2026-01-06 17:59:10 +01:00

dbus.c

treewide: fix typos in the entire codebase

2026-05-05 17:22:26 +02:00

dbus.h

…

device.c

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

device.h

…

dynamic-user.c

core: avoid false maybe-uninitialized warning

2026-06-02 13:20:29 +01:00

dynamic-user.h

tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends

2026-01-02 04:04:19 +09:00

efi-random.c

…

efi-random.h

…

emergency-action.c

core: make check-pointer-deref clean

2026-03-30 14:18:56 +02:00

emergency-action.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

exec-credential.c

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

exec-credential.h

core/exec-credential: introduce unit_refresh_credentials()

2026-02-10 21:54:12 +01:00

exec-invoke.c

core: Update stale UserNamespacePath= failure message

2026-06-08 16:34:28 +09:00

exec-invoke.h

…

execute-serialize.c

core/execute-serialize: fix error handling

2026-06-13 17:11:11 +02:00

execute-serialize.h

…

execute.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

execute.h

core: add FileDescriptorStorePreserve=on-success option

2026-05-21 10:14:08 +01:00

executor.c

options: get rid of "on_error" parameter to FOREACH_OPTION

2026-04-30 11:12:33 +01:00

fuzz-execute-serialize.c

core: Add UserNamespacePath=

2025-11-04 10:55:04 +01:00

fuzz-manager-serialize.c

…

fuzz-manager-serialize.options

…

fuzz-unit-file.c

…

fuzz-unit-file.options

…

generate-bpf-delegate-configs.py

ruff: use single quotes for multiline strings

2026-05-18 02:32:39 +09:00

generator-setup.c

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

generator-setup.h

tree-wide: Introduce sd-forward.h and shared-forward.h headers

2025-10-16 17:00:29 +02:00

ima-setup.c

…

ima-setup.h

…

import-creds.c

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

import-creds.h

…

ipe-setup.c

treewide: fix typos in the entire codebase

2026-05-05 17:22:26 +02:00

ipe-setup.h

…

job.c

core: transition job to JOB_FINISHED on uninstall

2026-04-28 09:01:54 +02:00

job.h

core: add io.systemd.Unit.StartTransient() to the varlink API

2026-04-27 13:49:24 +02:00

kill.c

…

kill.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

kmod-setup.c

kmod-setup: load vsock_loopback alongside vsock

2026-03-20 19:25:55 +00:00

kmod-setup.h

…

load-dropin.c

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

load-dropin.h

…

load-fragment-gperf-nulstr.awk

…

load-fragment-gperf.gperf.in

core: add LUOSession= unit setting

2026-06-17 13:11:15 +01:00

load-fragment.c

core: add LUOSession= unit setting

2026-06-17 13:11:15 +01:00

load-fragment.h

core: add LUOSession= unit setting

2026-06-17 13:11:15 +01:00

luo.c

core: add KExecsCount property

2026-06-19 19:36:01 +01:00

luo.h

core: support FD Store preservation through kexec via LUO

2026-05-15 13:46:08 +01:00

main.c

Add DLOPEN macros that stamp the caller's ELF and use it to ensure executables list their dlopen dependencies (#42398)

2026-06-02 18:05:34 +02:00

main.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

manager-dump.c

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

manager-dump.h

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

manager-serialize.c

core: add KExecsCount property

2026-06-19 19:36:01 +01:00

manager-serialize.h

…

manager.c

core: only attempt to deserialize state from LUO on boot

2026-06-16 11:35:11 +01:00

manager.h

core: add KExecsCount property

2026-06-19 19:36:01 +01:00

meson.build

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

mount.c

mount: log control command before clearing it in mount_sigchld_event()

2026-06-16 10:14:02 +02:00

mount.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

namespace.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

namespace.h

Add DEFINE_ARRAY_FREE_FUNC and mount_image_free_array

2026-04-10 15:08:02 +02:00

org.freedesktop.systemd1.conf

Missing policies for polkit as mentioned in freedesktop.org/software/systemd/man

2025-10-22 16:20:44 +02:00

org.freedesktop.systemd1.policy.in

…

org.freedesktop.systemd1.service

…

path.c

tree-wide: standardize header names across src/fundamental, src/basic and src/shared

2026-05-21 10:33:03 +09:00

path.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

scope.c

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

scope.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

selinux-access.c

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

selinux-access.h

core: Rename error sd_bus_error parameters to reterr_error

2025-11-26 16:22:50 +09:00

selinux-setup.c

tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros

2026-06-01 18:46:24 +01:00

selinux-setup.h

core: Only build selinux-setup if we have selinux

2026-03-20 21:38:08 +01:00

service.c

core: add LUOSession= unit setting

2026-06-17 13:11:15 +01:00

service.h

core: add LUOSession= unit setting

2026-06-17 13:11:15 +01:00

show-status.c

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

show-status.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

slice.c

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

slice.h

…

smack-setup.c

core: make check-pointer-deref clean

2026-03-30 14:18:56 +02:00

smack-setup.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

socket.c

user-util: return malloc'ed strings in get_user_creds

2026-05-21 18:02:05 +02:00

socket.h

core: fix accidental change in 3d0309ac0f

2026-06-05 18:37:57 +02:00

swap.c

core: when figuring out whether to create orphanage units, consult vtable instead of allowlist

2026-05-13 22:44:52 +01:00

swap.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

system.conf.in

core: make manager event loop rate limit configurable

2026-05-15 14:01:57 +09:00

systemd.pc.in

…

taint.c

…

taint.h

…

target.c

tree-wide: normalize comment style

2025-12-15 08:50:13 +09:00

target.h

…

timer.c

core: make check-pointer-deref clean

2026-03-30 14:18:56 +02:00

timer.h

string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends

2026-01-02 04:05:45 +09:00

transaction.c

core/transaction: when isolating, keep triggered units only if their triggers are actually active

2025-12-31 19:33:19 +01:00

transaction.h

core/transaction: assign unique ids to transactions and encode them in log

2025-11-12 23:47:38 +01:00

unit-dependency-atom.c

…

unit-dependency-atom.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

unit-printf.c

many: fix remaining check-pointer-deref issues

2026-04-12 15:27:15 +02:00

unit-printf.h

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

unit-serialize.c

core: when skipping state deserializing units, also skip job subsections

2026-05-06 12:04:51 +01:00

unit-serialize.h

tree-wide: Fix declaration/definition parameter name mismatches

2025-11-26 19:02:31 +09:00

unit.c

core: set pids.max=0 before sending SIGKILL to cgroup

2026-06-20 10:53:04 +01:00

unit.h

core: propagate FDs from store from user to system manager

2026-05-15 13:46:08 +01:00

user.conf.in

core: make manager event loop rate limit configurable

2026-05-15 14:01:57 +09:00

varlink-automount.c

core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests

2026-04-16 02:15:52 -07:00

varlink-automount.h

core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests

2026-04-16 02:15:52 -07:00

varlink-cgroup.c

oomd: ruleset parsing

2026-05-18 21:42:56 +02:00

varlink-cgroup.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

varlink-common.c

shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common

2026-05-15 00:02:01 -07:00

varlink-common.h

shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common

2026-05-15 00:02:01 -07:00

varlink-dynamic-user.c

sd-varlink: export sd_varlink_set_sentinel

2026-03-29 20:32:15 +02:00

varlink-dynamic-user.h

tree-wide: Various forward header cleanups

2025-10-17 21:11:23 +09:00

varlink-execute.c

core: ensure all types from execute.h start with Exec

2026-04-28 12:37:21 +01:00

varlink-execute.h

core: fix build error due to merge conflict in varlink-execute.h

2025-10-16 19:47:40 +01:00

varlink-job.c

core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods

2026-05-19 11:05:55 +02:00

varlink-job.h

core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods

2026-05-19 11:05:55 +02:00

varlink-kill.c

core: implement KillContext for io.systemd.Unit.List + tests

2026-04-15 23:37:55 -07:00

varlink-kill.h

core: implement KillContext for io.systemd.Unit.List + tests

2026-04-15 23:37:55 -07:00

varlink-manager.c

core: add KExecsCount property

2026-06-19 19:36:01 +01:00

varlink-manager.h

core: drop _manager() from new vl_method to shutdown

2026-03-26 15:21:10 +01:00

varlink-metrics.c

report: drop MetricsFamilyContext, CGroupContext, CGroupInfo

2026-05-12 22:56:04 +02:00

varlink-metrics.h

core/varlink-metrics: suffix metrics methods with _metrics

2026-02-16 09:44:57 +01:00

varlink-mount.c

core: implement MountContext/Runtime for io.systemd.Unit.List + tests

2026-04-16 02:15:52 -07:00

varlink-mount.h

core: implement MountContext/Runtime for io.systemd.Unit.List + tests

2026-04-16 02:15:52 -07:00

varlink-path.c

core: implement PathContext/Runtime for io.systemd.Unit.List + tests

2026-05-11 03:03:32 -07:00

varlink-path.h

core: implement PathContext/Runtime for io.systemd.Unit.List + tests

2026-05-11 03:03:32 -07:00

varlink-scope.c

core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields

2026-05-12 08:51:26 -07:00

varlink-scope.h

core: implement ScopeContext/Runtime for io.systemd.Unit.List + tests

2026-05-11 04:32:03 -07:00

varlink-service.c

core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List

2026-05-15 00:02:01 -07:00

varlink-service.h

core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List

2026-05-15 00:02:01 -07:00

varlink-socket.c

core: implement SocketContext/Runtime for io.systemd.Unit.List

2026-05-12 08:55:33 -07:00

varlink-socket.h

core: implement SocketContext/Runtime for io.systemd.Unit.List

2026-05-12 08:55:33 -07:00

varlink-swap.c

core: implement SwapContext/Runtime for io.systemd.Unit.List + tests

2026-05-11 04:32:14 -07:00

varlink-swap.h

core: implement SwapContext/Runtime for io.systemd.Unit.List + tests

2026-05-11 04:32:14 -07:00

varlink-timer.c

core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields

2026-05-12 08:51:26 -07:00

varlink-timer.h

core: implement TimerContext/Runtime for io.systemd.Unit.List + tests

2026-05-11 04:32:14 -07:00

varlink-unit.c

core: tweak error handling around VARLINK_ERROR_UNIT_BAD_SETTING

2026-05-20 16:11:45 +02:00

varlink-unit.h

core: add io.systemd.Unit.StartTransient() to the varlink API

2026-04-27 13:49:24 +02:00

varlink.c

core: clear pending_reload_message_vl on manager varlink teardown

2026-06-13 17:06:41 +02:00

varlink.h

core/varlink: several cleanups for metrics varlink server

2026-02-16 09:44:58 +01:00