SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
734cb86748bf4c2a4aa83282982fa47c0d1889c2
systemd/src/core
T
History
Ricardo Branco 2d3dd0a4fc seccomp: also refuse sched_setattr() in RestrictRealtime= 
RestrictRealtime= only filtered sched_setscheduler(). sched_setattr()
can switch a task to SCHED_FIFO and SCHED_RR as well, and is the only
way to get SCHED_DEADLINE, so a process that is otherwise allowed to use
realtime scheduling (CAP_SYS_NICE, or a non-zero RLIMIT_RTPRIO) could
bypass the restriction.

The policy is passed in a struct sched_attr by pointer, which seccomp
cannot inspect, so refuse the syscall altogether. This also affects
non-realtime callers of sched_setattr() (nice, utilization clamps),
which now get the same error as the refused policies. Document this in
systemd.exec(5) and extend the test.

CPUSchedulingPolicy= is applied through sched_setattr(), so a service
manager running under RestrictRealtime=yes (e.g. in a container) could
no longer start units with a non-realtime policy. Fall back to
sched_setscheduler() on EPERM, which the filter still allows for these
policies. This is not possible with CPUSchedulingResetOnFork=yes, as the
filter refuses SCHED_RESET_ON_FORK too, so setting the policy still
fails in that case.

Signed-off-by: Ricardo Branco <rbranco@suse.de>
(cherry picked from commit 590ff29a641a4ddb736ea59303af9721fc6c1400)
2026-10-16 17:24:52 +01:00
..
all-units.h
…
apparmor-setup.c
clang-tidy: Fix all remaining misc-include-cleaner violations
2025-11-22 10:19:41 +01:00
apparmor-setup.h
…
audit-fd.c
…
audit-fd.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
automount.c
core/automount: fail unread queued requests when giving up
2026-09-11 08:18:43 +02:00
automount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
bpf-bind-iface.c
core: Don't leak BPF links when realizing a cgroup again
2026-10-16 17:24:50 +01:00
bpf-bind-iface.h
Add support for binding a unit to a network iface
2025-12-24 07:37:58 +01:00
bpf-devices.c
tree-wide: make more use of stat_verify_device_node()
2026-04-13 13:20:43 +02:00
bpf-devices.h
…
bpf-firewall.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
bpf-firewall.h
…
bpf-foreign.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
bpf-foreign.h
…
bpf-restrict-fs.c
core/bpf-restrict-fs: use DEFINE_TRIVIAL_CLEANUP_FUNC_FULL_RENAME macro
2026-08-01 03:23:40 +09:00
bpf-restrict-fs.h
core/bpf-restrict-fs: merge three functions
2026-08-01 03:23:21 +09:00
bpf-restrict-fsaccess.c
core: check that proc_mem.force_override=never is active
2026-08-31 23:33:40 +02:00
bpf-restrict-fsaccess.h
core: centralize RestrictFileSystemAccess= checks
2026-08-31 23:33:39 +02:00
bpf-restrict-ifaces.c
core: Don't leak BPF links when realizing a cgroup again
2026-10-16 17:24:50 +01:00
bpf-restrict-ifaces.h
…
bpf-socket-bind.c
core: Don't leak BPF links when realizing a cgroup again
2026-10-16 17:24:50 +01:00
bpf-socket-bind.h
…
cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
cgroup.h
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
clock-warp.c
…
clock-warp.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
core-forward.h
Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h
2026-07-15 02:18:05 +09:00
crash-handler.c
shutdown: preserve console graphics mode across the exitrd handoff
2026-10-16 11:36:31 +01:00
crash-handler.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
dbus-automount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-automount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
dbus-cgroup.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-device.c
…
dbus-device.h
…
dbus-execute.c
core/dbus-execute: propagate oom in property_get_cpu_affinity
2026-05-18 12:29:12 +02:00
dbus-execute.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-job.c
core: Don't abort when canceling a job through the private bus
2026-10-16 17:24:50 +01:00
dbus-job.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-manager.c
Rename KExecsCount to KExecCount
2026-09-22 14:38:02 +02:00
dbus-manager.h
core/dbus-manager: drop dangling verify_run_space_and_log() prototype
2025-12-18 17:37:26 +01:00
dbus-mount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-mount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-path.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-path.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
dbus-service.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-slice.c
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
dbus-slice.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-socket.c
core: fix integer truncation checks
2026-08-19 02:28:19 +09:00
dbus-socket.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-target.c
…
dbus-target.h
…
dbus-timer.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-timer.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-unit.c
core/dbus-unit: fix returning on "JobTimeoutUSec"
2026-10-16 11:36:32 +01:00
dbus-unit.h
core: add method to enqueue multiple jobs in a single call
2026-06-22 13:01:17 +01:00
dbus-util.c
core/dbus-util: several cleanups for bus_read_mount_options()
2026-01-19 17:49:29 +01:00
dbus-util.h
core: change mount options settings so that last defined wins
2026-01-06 17:59:10 +01:00
dbus.c
tree-wide: add missing assertions
2026-08-18 06:30:10 +09:00
dbus.h
…
device.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
device.h
…
dynamic-user.c
tree-wide: use pwrite_full() for positioned writes
2026-10-16 17:24:51 +01:00
dynamic-user.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
efi-random.c
…
efi-random.h
…
emergency-action.c
core: don't exit 0 when a failure action has nothing to propagate
2026-09-03 10:09:32 -07:00
emergency-action.h
core: don't exit 0 when a failure action has nothing to propagate
2026-09-03 10:09:32 -07:00
exec-credential.c
namespace-util: fail if we cannot become root when entering a userns
2026-09-22 13:48:24 +02:00
exec-credential.h
core/exec-credential: introduce unit_refresh_credentials()
2026-02-10 21:54:12 +01:00
exec-invoke.c
seccomp: also refuse sched_setattr() in RestrictRealtime=
2026-10-16 17:24:52 +01:00
exec-invoke.h
…
execute-serialize.c
core/execute: don't assert on an unpatched exec context
2026-08-25 06:05:37 -07:00
execute-serialize.h
…
execute.c
tree-wide: add missing assertions
2026-08-18 06:30:10 +09:00
execute.h
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
executor.c
tree-wide: format man page references as foo(1)
2026-08-28 06:34:45 +09:00
executor.h
manager: make systemd+executor a multicall binary
2026-06-22 17:19:54 +02:00
fuzz-execute-serialize.c
core: Add UserNamespacePath=
2025-11-04 10:55:04 +01:00
fuzz-manager-serialize.c
…
fuzz-manager-serialize.options
…
fuzz-unit-file.c
…
fuzz-unit-file.options
…
generate-bpf-delegate-configs.py
ruff: use single quotes for multiline strings
2026-05-18 02:32:39 +09:00
generate-builtin-units.py
core: embed essential units as built-in fallbacks
2026-07-02 17:19:18 +02:00
generator-setup.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
generator-setup.h
tree-wide: Introduce sd-forward.h and shared-forward.h headers
2025-10-16 17:00:29 +02:00
ima-setup.c
…
ima-setup.h
…
import-creds.c
core: trust SMBIOS credentials under Intel TDX
2026-07-01 16:09:27 +02:00
import-creds.h
…
ipe-setup.c
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
ipe-setup.h
…
job.c
core: don't exit 0 when a failure action has nothing to propagate
2026-09-03 10:09:32 -07:00
job.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
kill.c
…
kill.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
kmod-setup.c
kmod-setup: support early loading for virtio-ccw devices
2026-08-31 19:40:33 +09:00
kmod-setup.h
…
load-dropin.c
core: drop the dependency dropin name from the mask log line
2026-10-16 11:36:32 +01:00
load-dropin.h
…
load-fragment-gperf-nulstr.awk
…
load-fragment-gperf.gperf.in
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
load-fragment.c
core: fix bind paths whitespace parsing
2026-08-15 00:26:40 +09:00
load-fragment.h
core: add socket xattr settings for socket unit
2026-06-23 22:55:23 +02:00
luo.c
Rename KExecsCount to KExecCount
2026-09-22 14:38:02 +02:00
luo.h
core: support FD Store preservation through kexec via LUO
2026-05-15 13:46:08 +01:00
main.c
shutdown: preserve console graphics mode across the exitrd handoff
2026-10-16 11:36:31 +01:00
main.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
manager-dump.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-dump.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-serialize.c
Rename KExecsCount to KExecCount
2026-09-22 14:38:02 +02:00
manager-serialize.h
…
manager.c
core: Add SERVICE_RUNNING_REVALIDATING state
2026-09-01 02:12:52 +09:00
manager.h
Rename KExecsCount to KExecCount
2026-09-22 14:38:02 +02:00
meson.build
meson: use -static-pie instead of -static in PIE mode
2026-10-16 11:36:33 +01:00
mount.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
mount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
namespace.c
namespace,condition: drop invalid _const_ attributes
2026-09-22 02:46:35 +09:00
namespace.h
namespace,condition: drop invalid _const_ attributes
2026-09-22 02:46:35 +09:00
org.freedesktop.systemd1.conf
dbus: allow FreezeUnit and ThawUnit D-Bus requests (#43292)
2026-08-05 14:44:25 +01:00
org.freedesktop.systemd1.policy.in
…
org.freedesktop.systemd1.service
…
path.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
path.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
scope.c
core/scope: don't assert when start is retried during cgroup chown
2026-07-01 22:46:45 +01:00
scope.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
selinux-access.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-access.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-setup.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
selinux-setup.h
core: Only build selinux-setup if we have selinux
2026-03-20 21:38:08 +01:00
service.c
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
service.h
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
show-status.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
show-status.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
slice.c
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
slice.h
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
smack-setup.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
smack-setup.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
socket.c
label: plumb label_context through LabelOps
2026-07-31 09:49:41 +02:00
socket.h
core: add socket xattr settings for socket unit
2026-06-23 22:55:23 +02:00
swap.c
core/swap: refuse to run swapoff without a device
2026-08-25 06:05:37 -07:00
swap.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
system.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
systemd.pc.in
…
taint.c
taint: don't taint if /bin, /usr/sbin, /var/run don't exist
2026-10-16 11:36:32 +01:00
taint.h
…
target.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
target.h
…
timer.c
core/timer: fix next trigger with RandomizedOffsetSec + Persistent (#42826)
2026-08-01 00:53:33 +09:00
timer.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
transaction.c
core: fix assertion when inactive unit pulled in by try-restart and start at the same time
2026-06-23 17:36:03 +01:00
transaction.h
core: add method to enqueue multiple jobs in a single call
2026-06-22 13:01:17 +01:00
unit-dependency-atom.c
…
unit-dependency-atom.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
unit-printf.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
unit-printf.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit-serialize.c
core: when skipping state deserializing units, also skip job subsections
2026-05-06 12:04:51 +01:00
unit-serialize.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit.c
condition: propagate errors from condition_test_list()
2026-09-08 17:34:06 +08:00
unit.h
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
user.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
varlink-automount.c
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-automount.h
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
varlink-cgroup.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
varlink-common.c
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-common.h
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-dynamic-user.c
sd-varlink: export sd_varlink_set_sentinel
2026-03-29 20:32:15 +02:00
varlink-dynamic-user.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
varlink-execute.c
numa: add support for preferred-many and weighted-interleave policies
2026-06-28 13:40:07 +09:00
varlink-execute.h
Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h
2026-07-15 02:18:05 +09:00
varlink-job.c
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-job.h
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-kill.c
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-kill.h
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-manager.c
Rename KExecsCount to KExecCount
2026-09-22 14:38:02 +02:00
varlink-manager.h
core: drop _manager() from new vl_method to shutdown
2026-03-26 15:21:10 +01:00
varlink-metrics.c
core: add all manager timestamps to metrics report
2026-07-02 17:01:02 +01:00
varlink-metrics.h
core/varlink-metrics: suffix metrics methods with _metrics
2026-02-16 09:44:57 +01:00
varlink-mount.c
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-mount.h
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-path.c
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-path.h
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-scope.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-scope.h
core: implement ScopeContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:03 -07:00
varlink-service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
varlink-service.h
core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List
2026-05-15 00:02:01 -07:00
varlink-socket.c
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-socket.h
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-swap.c
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-swap.h
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-timer.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-timer.h
core: implement TimerContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-unit.c
core: support CollectMode in Varlink StartTransient
2026-07-25 15:35:28 +09:00
varlink-unit.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
varlink.c
core: tag dynamic user userdb provider with dynamic uid/gid ranges
2026-07-12 23:09:01 +02:00
varlink.h
core/varlink: several cleanups for metrics varlink server
2026-02-16 09:44:58 +01:00