SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
45920af4a41a6f97f3e7aeac9aff6da907d85dcd
systemd/src/core
T
History
Luca Boccassi 45920af4a4 executor: also preload libcrypto 
It's needed for the userspace fallback verity verification, so
it needs to be pre-loaded to avoid getting blocked by RTLD_NOLOAD:

 [   57.163995] (cat)[1560]: minimal-app0-foo.service: Validation of dm-verity signature failed via the kernel, trying userspace validation instead: Required key not available
 [   57.194696] (cat)[1560]: minimal-app0-foo.service: Refusing loading of 'libcrypto.so.3', as loading further dlopen() modules has been blocked.
 [   57.197940] (cat)[1560]: minimal-app0-foo.service: Shared library 'libcrypto.so.3' is not available: Operation not permitted
 [   57.204283] (cat)[1560]: minimal-app0-foo.service: Failed to activate verity device /dev/mapper/2b2fd83f324c3aa2ea1a979899f9c630761f1de3c5e00ce8c6bb36f4d137f450-verity: Operation not supported
 [   57.272782] (cat)[1560]: minimal-app0-foo.service: Failed to set up mount namespacing: Operation not supported
 [   57.274250] (cat)[1560]: minimal-app0-foo.service: Failed at step NAMESPACE spawning cat: Operation not supported

Follow-up for efaf5a763d
2026-06-20 23:51:24 +02:00
..
all-units.h
…
apparmor-setup.c
clang-tidy: Fix all remaining misc-include-cleaner violations
2025-11-22 10:19:41 +01:00
apparmor-setup.h
…
audit-fd.c
…
audit-fd.h
…
automount.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
automount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
bpf-bind-iface.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
bpf-bind-iface.h
Add support for binding a unit to a network iface
2025-12-24 07:37:58 +01:00
bpf-devices.c
tree-wide: make more use of stat_verify_device_node()
2026-04-13 13:20:43 +02:00
bpf-devices.h
…
bpf-firewall.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
bpf-firewall.h
…
bpf-foreign.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
bpf-foreign.h
…
bpf-restrict-fs.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
bpf-restrict-fs.h
…
bpf-restrict-fsaccess.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
bpf-restrict-fsaccess.h
core: expose internal helpers for test-bpf-restrict-fsaccess
2026-05-13 10:36:12 +02:00
bpf-restrict-ifaces.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
bpf-restrict-ifaces.h
…
bpf-socket-bind.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
bpf-socket-bind.h
…
cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
cgroup.h
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
clock-warp.c
…
clock-warp.h
…
core-forward.h
core: add RestrictFileSystemAccess= BPF LSM for dm-verity execution enforcement
2026-05-13 10:36:12 +02:00
crash-handler.c
tree-wide: Use pidref_wait_for_terminate_and_check()
2025-12-20 15:50:47 +01:00
crash-handler.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
dbus-automount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-automount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
dbus-cgroup.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-device.c
…
dbus-device.h
…
dbus-execute.c
core/dbus-execute: propagate oom in property_get_cpu_affinity
2026-05-18 12:29:12 +02:00
dbus-execute.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-job.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-job.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-manager.c
core: add KExecsCount property
2026-06-19 19:36:01 +01:00
dbus-manager.h
core/dbus-manager: drop dangling verify_run_space_and_log() prototype
2025-12-18 17:37:26 +01:00
dbus-mount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-mount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-path.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-path.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
dbus-service.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-slice.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-slice.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-socket.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-socket.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-target.c
…
dbus-target.h
…
dbus-timer.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-timer.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-unit.c
core/dbus-unit: query sender uid only once, validate unit uid early
2026-02-26 14:23:23 +01:00
dbus-unit.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-util.c
core/dbus-util: several cleanups for bus_read_mount_options()
2026-01-19 17:49:29 +01:00
dbus-util.h
core: change mount options settings so that last defined wins
2026-01-06 17:59:10 +01:00
dbus.c
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
dbus.h
…
device.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
device.h
…
dynamic-user.c
core: avoid false maybe-uninitialized warning
2026-06-02 13:20:29 +01:00
dynamic-user.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
efi-random.c
…
efi-random.h
…
emergency-action.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
emergency-action.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
exec-credential.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
exec-credential.h
core/exec-credential: introduce unit_refresh_credentials()
2026-02-10 21:54:12 +01:00
exec-invoke.c
executor: also preload libcrypto
2026-06-20 23:51:24 +02:00
exec-invoke.h
…
execute-serialize.c
core/execute-serialize: fix error handling
2026-06-13 17:11:11 +02:00
execute-serialize.h
…
execute.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
execute.h
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
executor.c
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
fuzz-execute-serialize.c
…
fuzz-manager-serialize.c
…
fuzz-manager-serialize.options
…
fuzz-unit-file.c
…
fuzz-unit-file.options
…
generate-bpf-delegate-configs.py
ruff: use single quotes for multiline strings
2026-05-18 02:32:39 +09:00
generator-setup.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
generator-setup.h
…
ima-setup.c
…
ima-setup.h
…
import-creds.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
import-creds.h
…
ipe-setup.c
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
ipe-setup.h
…
job.c
core: transition job to JOB_FINISHED on uninstall
2026-04-28 09:01:54 +02:00
job.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
kill.c
…
kill.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
kmod-setup.c
kmod-setup: load vsock_loopback alongside vsock
2026-03-20 19:25:55 +00:00
kmod-setup.h
…
load-dropin.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
load-dropin.h
…
load-fragment-gperf-nulstr.awk
…
load-fragment-gperf.gperf.in
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
load-fragment.c
core: add LUOSession= unit setting
2026-06-17 13:11:15 +01:00
load-fragment.h
core: add LUOSession= unit setting
2026-06-17 13:11:15 +01:00
luo.c
core: add KExecsCount property
2026-06-19 19:36:01 +01:00
luo.h
core: support FD Store preservation through kexec via LUO
2026-05-15 13:46:08 +01:00
main.c
Add DLOPEN macros that stamp the caller's ELF and use it to ensure executables list their dlopen dependencies (#42398)
2026-06-02 18:05:34 +02:00
main.h
…
manager-dump.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-dump.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-serialize.c
core: add KExecsCount property
2026-06-19 19:36:01 +01:00
manager-serialize.h
…
manager.c
core: only attempt to deserialize state from LUO on boot
2026-06-16 11:35:11 +01:00
manager.h
core: add KExecsCount property
2026-06-19 19:36:01 +01:00
meson.build
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
mount.c
mount: log control command before clearing it in mount_sigchld_event()
2026-06-16 10:14:02 +02:00
mount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
namespace.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
namespace.h
Add DEFINE_ARRAY_FREE_FUNC and mount_image_free_array
2026-04-10 15:08:02 +02:00
org.freedesktop.systemd1.conf
…
org.freedesktop.systemd1.policy.in
…
org.freedesktop.systemd1.service
…
path.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
path.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
scope.c
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
scope.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
selinux-access.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-access.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-setup.c
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
selinux-setup.h
core: Only build selinux-setup if we have selinux
2026-03-20 21:38:08 +01:00
service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
service.h
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
show-status.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
show-status.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
slice.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
slice.h
…
smack-setup.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
smack-setup.h
…
socket.c
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
socket.h
core: fix accidental change in 3d0309ac0f
2026-06-05 18:37:57 +02:00
swap.c
core: when figuring out whether to create orphanage units, consult vtable instead of allowlist
2026-05-13 22:44:52 +01:00
swap.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
system.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
systemd.pc.in
…
taint.c
…
taint.h
…
target.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
target.h
…
timer.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
timer.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
transaction.c
core/transaction: when isolating, keep triggered units only if their triggers are actually active
2025-12-31 19:33:19 +01:00
transaction.h
core/transaction: assign unique ids to transactions and encode them in log
2025-11-12 23:47:38 +01:00
unit-dependency-atom.c
…
unit-dependency-atom.h
…
unit-printf.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
unit-printf.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit-serialize.c
core: when skipping state deserializing units, also skip job subsections
2026-05-06 12:04:51 +01:00
unit-serialize.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit.c
core: set pids.max=0 before sending SIGKILL to cgroup
2026-06-20 10:53:04 +01:00
unit.h
core: propagate FDs from store from user to system manager
2026-05-15 13:46:08 +01:00
user.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
varlink-automount.c
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-automount.h
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
varlink-cgroup.h
…
varlink-common.c
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-common.h
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-dynamic-user.c
sd-varlink: export sd_varlink_set_sentinel
2026-03-29 20:32:15 +02:00
varlink-dynamic-user.h
…
varlink-execute.c
core: ensure all types from execute.h start with Exec
2026-04-28 12:37:21 +01:00
varlink-execute.h
…
varlink-job.c
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-job.h
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-kill.c
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-kill.h
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-manager.c
core: add KExecsCount property
2026-06-19 19:36:01 +01:00
varlink-manager.h
core: drop _manager() from new vl_method to shutdown
2026-03-26 15:21:10 +01:00
varlink-metrics.c
report: drop MetricsFamilyContext, CGroupContext, CGroupInfo
2026-05-12 22:56:04 +02:00
varlink-metrics.h
core/varlink-metrics: suffix metrics methods with _metrics
2026-02-16 09:44:57 +01:00
varlink-mount.c
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-mount.h
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-path.c
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-path.h
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-scope.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-scope.h
core: implement ScopeContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:03 -07:00
varlink-service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
varlink-service.h
core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List
2026-05-15 00:02:01 -07:00
varlink-socket.c
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-socket.h
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-swap.c
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-swap.h
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-timer.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-timer.h
core: implement TimerContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-unit.c
core: tweak error handling around VARLINK_ERROR_UNIT_BAD_SETTING
2026-05-20 16:11:45 +02:00
varlink-unit.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
varlink.c
core: clear pending_reload_message_vl on manager varlink teardown
2026-06-13 17:06:41 +02:00
varlink.h
core/varlink: several cleanups for metrics varlink server
2026-02-16 09:44:58 +01:00