Anthony Messina 6cbd126b0b nspawn: add @keyring to default syscall allow_list ...

Keyring namespacing introduced in kernel version v5.3-rc1 https://github.com/torvalds/linux/commit/c84ca912b07901be528e5184fd254fca1dddf2ac

Fixes #17606

2025-02-12 08:05:11 +09:00

..

fuzz-nspawn-oci.c

…

fuzz-nspawn-oci.options

…

fuzz-nspawn-settings.c

…

fuzz-nspawn-settings.options

…

meson.build

nspawn: move uid shift/chown() code into shared/

2025-01-04 12:23:31 +09:00

nspawn-bind-user.c

userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side

2025-01-27 23:51:57 +01:00

nspawn-bind-user.h

…

nspawn-cgroup.c

nspawn: add support for 'managed' userns mode even when we run privileged

2025-01-23 21:48:02 +01:00

nspawn-cgroup.h

nspawn: add support for 'managed' userns mode even when we run privileged

2025-01-23 21:48:02 +01:00

nspawn-expose-ports.c

…

nspawn-expose-ports.h

…

nspawn-gperf.gperf

meson: enable -Wzero-as-null-pointer-constant

2025-01-16 02:26:56 +01:00

nspawn-mount.c

nspawn: add support for 'managed' userns mode even when we run privileged

2025-01-23 21:48:02 +01:00

nspawn-mount.h

nspawn: add support for 'managed' userns mode even when we run privileged

2025-01-23 21:48:02 +01:00

nspawn-network.c

tree-wide: port more code to namespace_open_by_type()

2025-01-10 14:09:48 +01:00

nspawn-network.h

nspawn: remove macvlan interfaces before network namespace died

2024-07-30 12:38:50 +02:00

nspawn-oci.c

tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros (#34893)

2024-10-26 07:10:22 +09:00

nspawn-oci.h

…

nspawn-register.c

nspawn: sync DeviceAllow= setting with systemd-nspawn@.service

2024-09-10 04:38:11 +09:00

nspawn-register.h

nspawn: enable FUSE in containers

2024-09-07 10:18:35 -06:00

nspawn-seccomp.c

nspawn: add @keyring to default syscall allow_list

2025-02-12 08:05:11 +09:00

nspawn-seccomp.h

…

nspawn-settings.c

nspawn: support foreign mappings also when nspawn doing the mapping itself

2025-01-23 21:48:02 +01:00

nspawn-settings.h

nspawn: add support for 'managed' userns mode even when we run privileged

2025-01-23 21:48:02 +01:00

nspawn-setuid.c

user-util: add new helper fully_set_uid_gid()

2023-12-06 22:11:38 +01:00

nspawn-setuid.h

…

nspawn-stub-pid1.c

…

nspawn-stub-pid1.h

…

nspawn-util.c

nspawn: Assume unified cgroup hierarchy if there's no systemd in the image

2024-08-13 19:09:26 +02:00

nspawn-util.h

…

nspawn.c

nspawn: add support for 'managed' userns mode even when we run privileged

2025-01-23 21:48:02 +01:00

nspawn.h

nspawn: add new common make_run_host() helper

2024-01-05 22:34:47 +01:00

test-nspawn-tables.c

…

test-nspawn-util.c

nspawn: Assume unified cgroup hierarchy if there's no systemd in the image

2024-08-13 19:09:26 +02:00