SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
414fc6e3b200eea45ee97eddb79c7496e01db16c
systemd/src/core
T
History
Chris Mason 99aff23783 core/exec-invoke: log write() allow-list widening 
apply_syscall_filter() unconditionally inserts the write() syscall
into c->syscall_filter when exec_fd or handoff_timestamp_fd is in
use, so the parent can receive the exec status / handoff timestamp
from the child. When the unit configured a positive
SystemCallFilter= allow-list that deliberately omits write(), the
resulting widening of the operator's policy happens silently with
no trace in the journal.

Emit a log_debug() before the seccomp_filter_set_add_by_name() call
when syscall_allow_list is true, so the widening is at least
observable to operators inspecting the unit's debug log.

While here, document that mutating c->syscall_filter through a
'const ExecContext *c' is intentional: apply_syscall_filter() runs
only in the post-fork child, which owns a private copy of the
address space, so the hashmap change is never observed by the
manager.

No functional change for the allow-list itself; write() is still
added exactly as before.

Fixes: 84b79215cc ("core: do not filter out write() if required in the very late stage")
Assisted-by: kres (claude-opus-4-7)
Signed-off-by: Chris Mason <clm@meta.com>
2026-05-22 22:19:35 +02:00
..
all-units.h
…
apparmor-setup.c
clang-tidy: Fix all remaining misc-include-cleaner violations
2025-11-22 10:19:41 +01:00
apparmor-setup.h
…
audit-fd.c
…
audit-fd.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
automount.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
automount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
bpf-bind-iface.c
bpf-util: rename from bpf-dlopen, unify version-specific symbol handling
2026-05-18 21:17:38 +00:00
bpf-bind-iface.h
Add support for binding a unit to a network iface
2025-12-24 07:37:58 +01:00
bpf-devices.c
tree-wide: make more use of stat_verify_device_node()
2026-04-13 13:20:43 +02:00
bpf-devices.h
…
bpf-firewall.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
bpf-firewall.h
…
bpf-foreign.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
bpf-foreign.h
…
bpf-restrict-fs.c
bpf-util: rename from bpf-dlopen, unify version-specific symbol handling
2026-05-18 21:17:38 +00:00
bpf-restrict-fs.h
…
bpf-restrict-fsaccess.c
bpf-util: rename from bpf-dlopen, unify version-specific symbol handling
2026-05-18 21:17:38 +00:00
bpf-restrict-fsaccess.h
core: expose internal helpers for test-bpf-restrict-fsaccess
2026-05-13 10:36:12 +02:00
bpf-restrict-ifaces.c
bpf-util: rename from bpf-dlopen, unify version-specific symbol handling
2026-05-18 21:17:38 +00:00
bpf-restrict-ifaces.h
…
bpf-socket-bind.c
bpf-util: rename from bpf-dlopen, unify version-specific symbol handling
2026-05-18 21:17:38 +00:00
bpf-socket-bind.h
…
cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
cgroup.h
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
clock-warp.c
…
clock-warp.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
core-forward.h
core: add RestrictFileSystemAccess= BPF LSM for dm-verity execution enforcement
2026-05-13 10:36:12 +02:00
crash-handler.c
tree-wide: Use pidref_wait_for_terminate_and_check()
2025-12-20 15:50:47 +01:00
crash-handler.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
dbus-automount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-automount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
dbus-cgroup.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-device.c
…
dbus-device.h
…
dbus-execute.c
core/dbus-execute: propagate oom in property_get_cpu_affinity
2026-05-18 12:29:12 +02:00
dbus-execute.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-job.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-job.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-manager.c
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
dbus-manager.h
core/dbus-manager: drop dangling verify_run_space_and_log() prototype
2025-12-18 17:37:26 +01:00
dbus-mount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-mount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-path.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-path.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-service.c
core/service: introduce RefreshOnReload= setting
2026-02-10 21:54:12 +01:00
dbus-service.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-slice.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-slice.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-socket.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-socket.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-target.c
…
dbus-target.h
…
dbus-timer.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-timer.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-unit.c
core/dbus-unit: query sender uid only once, validate unit uid early
2026-02-26 14:23:23 +01:00
dbus-unit.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-util.c
core/dbus-util: several cleanups for bus_read_mount_options()
2026-01-19 17:49:29 +01:00
dbus-util.h
core: change mount options settings so that last defined wins
2026-01-06 17:59:10 +01:00
dbus.c
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
dbus.h
…
device.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
device.h
…
dynamic-user.c
core/dynamic-user: use fd_verify_linked()
2026-01-03 21:25:02 +01:00
dynamic-user.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
efi-random.c
…
efi-random.h
…
emergency-action.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
emergency-action.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
exec-credential.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
exec-credential.h
core/exec-credential: introduce unit_refresh_credentials()
2026-02-10 21:54:12 +01:00
exec-invoke.c
core/exec-invoke: log write() allow-list widening
2026-05-22 22:19:35 +02:00
exec-invoke.h
…
execute-serialize.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
execute-serialize.h
…
execute.c
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
execute.h
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
executor.c
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
fuzz-execute-serialize.c
core: Add UserNamespacePath=
2025-11-04 10:55:04 +01:00
fuzz-manager-serialize.c
…
fuzz-manager-serialize.options
…
fuzz-unit-file.c
…
fuzz-unit-file.options
…
generate-bpf-delegate-configs.py
ruff: use single quotes for multiline strings
2026-05-18 02:32:39 +09:00
generator-setup.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
generator-setup.h
tree-wide: Introduce sd-forward.h and shared-forward.h headers
2025-10-16 17:00:29 +02:00
ima-setup.c
…
ima-setup.h
…
import-creds.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
import-creds.h
…
ipe-setup.c
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
ipe-setup.h
…
job.c
core: transition job to JOB_FINISHED on uninstall
2026-04-28 09:01:54 +02:00
job.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
kill.c
…
kill.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
kmod-setup.c
kmod-setup: load vsock_loopback alongside vsock
2026-03-20 19:25:55 +00:00
kmod-setup.h
…
load-dropin.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
load-dropin.h
…
load-fragment-gperf-nulstr.awk
…
load-fragment-gperf.gperf.in
condition: add a condition that matches against the machine tags
2026-05-21 18:30:16 +02:00
load-fragment.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
load-fragment.h
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
luo.c
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
luo.h
core: support FD Store preservation through kexec via LUO
2026-05-15 13:46:08 +01:00
main.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
main.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
manager-dump.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-dump.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-serialize.c
core: propagate FDs from store from user to system manager
2026-05-15 13:46:08 +01:00
manager-serialize.h
…
manager.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
manager.h
core: propagate FDs from store from user to system manager
2026-05-15 13:46:08 +01:00
meson.build
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
mount.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
mount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
namespace.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
namespace.h
Add DEFINE_ARRAY_FREE_FUNC and mount_image_free_array
2026-04-10 15:08:02 +02:00
org.freedesktop.systemd1.conf
Missing policies for polkit as mentioned in freedesktop.org/software/systemd/man
2025-10-22 16:20:44 +02:00
org.freedesktop.systemd1.policy.in
…
org.freedesktop.systemd1.service
…
path.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
path.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
scope.c
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
scope.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
selinux-access.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-access.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-setup.c
dlopen: take log_level argument and log in fallback stubs
2026-04-22 17:41:42 +02:00
selinux-setup.h
core: Only build selinux-setup if we have selinux
2026-03-20 21:38:08 +01:00
service.c
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
service.h
core: propagate FDs from store from user to system manager
2026-05-15 13:46:08 +01:00
show-status.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
show-status.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
slice.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
slice.h
…
smack-setup.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
smack-setup.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
socket.c
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
socket.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
swap.c
core: when figuring out whether to create orphanage units, consult vtable instead of allowlist
2026-05-13 22:44:52 +01:00
swap.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
system.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
systemd.pc.in
core/systemd.pc: do not add new non-underscored vars
2025-09-23 03:46:55 +09:00
taint.c
…
taint.h
…
target.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
target.h
…
timer.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
timer.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
transaction.c
core/transaction: when isolating, keep triggered units only if their triggers are actually active
2025-12-31 19:33:19 +01:00
transaction.h
core/transaction: assign unique ids to transactions and encode them in log
2025-11-12 23:47:38 +01:00
unit-dependency-atom.c
…
unit-dependency-atom.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
unit-printf.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
unit-printf.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit-serialize.c
core: when skipping state deserializing units, also skip job subsections
2026-05-06 12:04:51 +01:00
unit-serialize.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
unit.h
core: propagate FDs from store from user to system manager
2026-05-15 13:46:08 +01:00
user.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
varlink-automount.c
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-automount.h
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
varlink-cgroup.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
varlink-common.c
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-common.h
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-dynamic-user.c
sd-varlink: export sd_varlink_set_sentinel
2026-03-29 20:32:15 +02:00
varlink-dynamic-user.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
varlink-execute.c
core: ensure all types from execute.h start with Exec
2026-04-28 12:37:21 +01:00
varlink-execute.h
core: fix build error due to merge conflict in varlink-execute.h
2025-10-16 19:47:40 +01:00
varlink-job.c
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-job.h
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-kill.c
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-kill.h
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-manager.c
core: add ReloadCount to Manager and bump on successful reload
2026-05-03 10:23:55 +01:00
varlink-manager.h
core: drop _manager() from new vl_method to shutdown
2026-03-26 15:21:10 +01:00
varlink-metrics.c
report: drop MetricsFamilyContext, CGroupContext, CGroupInfo
2026-05-12 22:56:04 +02:00
varlink-metrics.h
core/varlink-metrics: suffix metrics methods with _metrics
2026-02-16 09:44:57 +01:00
varlink-mount.c
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-mount.h
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-path.c
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-path.h
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-scope.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-scope.h
core: implement ScopeContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:03 -07:00
varlink-service.c
core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List
2026-05-15 00:02:01 -07:00
varlink-service.h
core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List
2026-05-15 00:02:01 -07:00
varlink-socket.c
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-socket.h
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-swap.c
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-swap.h
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-timer.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-timer.h
core: implement TimerContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-unit.c
core: tweak error handling around VARLINK_ERROR_UNIT_BAD_SETTING
2026-05-20 16:11:45 +02:00
varlink-unit.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
varlink.c
core: introduce varlink io.systemd.Job interface (#42104)
2026-05-20 17:22:18 +09:00
varlink.h
core/varlink: several cleanups for metrics varlink server
2026-02-16 09:44:58 +01:00