SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d34cd374905a40e65769351a2808b741b5418bf1
systemd/src/shared
T
History
Zbigniew Jędrzejewski-Szmek d34cd37490 Make PrivateTmp dirs also inaccessible from the outside 
Currently, PrivateTmp=yes means that the service cannot see the /tmp
shared by rest of the system and is isolated from other services using
PrivateTmp, but users can access and modify /tmp as seen by the
service.

Move the private /tmp and /var/tmp directories into a 0077-mode
directory. This way unpriviledged users on the system cannot see (or
modify) /tmp as seen by the service.
2013-03-20 14:08:41 -04:00
..
linux
execute: support syscall filtering using seccomp filters
2012-07-17 04:17:53 +02:00
acl-util.c
relicense to LGPLv2.1 (with exceptions)
2012-04-12 00:24:39 +02:00
acl-util.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
ask-password-api.c
Revert "log_error() if inotify_add_watch() fails"
2013-02-13 16:25:33 +01:00
ask-password-api.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
audit.c
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
audit.h
audit: turn the audit fd into a static variable
2012-10-02 17:40:09 -04:00
calendarspec.c
util: introduce strcaseeq/strncaseeq
2013-02-13 00:56:13 +01:00
calendarspec.h
timer: implement calendar time events
2012-11-23 21:37:58 +01:00
capability.c
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
capability.h
capabilities: when dropping capabilities system-wide also drop them from usermode helpers
2012-05-29 23:35:17 +02:00
cgroup-label.c
mkdir: append _label to all mkdir() calls that explicitly set the selinux context
2012-05-31 12:40:20 +02:00
cgroup-show.c
systemctl,loginctl,cgls: do not ellipsize cgroup members when --full is specified
2013-01-16 12:11:47 -05:00
cgroup-show.h
systemctl,loginctl,cgls: do not ellipsize cgroup members when --full is specified
2013-01-16 12:11:47 -05:00
cgroup-util.c
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
cgroup-util.h
cgroup: additional validity checks for cgroup attribute names
2013-01-19 01:02:30 +01:00
conf-files.c
binfmt,tmpfiles,modules-load,sysctl: rework the various early-boot services that work on .d/ directories
2013-02-11 23:54:30 +01:00
conf-files.h
binfmt,tmpfiles,modules-load,sysctl: rework the various early-boot services that work on .d/ directories
2013-02-11 23:54:30 +01:00
conf-parser.c
bootchart: use conf-parser & CamelCase names in .conf
2013-02-14 21:36:45 +01:00
conf-parser.h
bootchart: use conf-parser & CamelCase names in .conf
2013-02-14 21:36:45 +01:00
dbus-common.c
dbus: introduce parse_unit_info
2013-02-13 14:36:01 -08:00
dbus-common.h
dbus: introduce parse_unit_info
2013-02-13 14:36:01 -08:00
dbus-loop.c
move remainig shared stuff to shared/
2012-04-12 15:11:39 +02:00
dbus-loop.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
def.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
dev-setup.c
dev-setup: make NULL as parameter for dev_setup() equivalent to ""
2012-08-21 17:23:03 +02:00
dev-setup.h
dev-setup: allow a path prefix for use in chroots
2012-08-21 17:19:35 +02:00
efivars.c
bootctl: print secure boot flags
2013-03-10 22:48:27 +01:00
efivars.h
bootctl: print secure boot flags
2013-03-10 22:48:27 +01:00
env-util.c
man: rename systemd.conf to systemd-system.conf
2013-02-13 09:48:32 -05:00
env-util.h
manager: validate environment parameters for SetEnvironment(), UnsetEnvironment() bus calls
2013-02-11 23:54:30 +01:00
exit-status.c
service: add options RestartPreventExitStatus and SuccessExitStatus
2012-08-14 14:46:03 +02:00
exit-status.h
service: add options RestartPreventExitStatus and SuccessExitStatus
2012-08-14 14:46:03 +02:00
fdset.c
shared: move fdset.c from core/ to shared/ since it is used by more than the core now
2012-12-23 11:28:14 +01:00
fdset.h
shared: move fdset.c from core/ to shared/ since it is used by more than the core now
2012-12-23 11:28:14 +01:00
fileio-label.c
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
fileio-label.h
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
fileio.c
fileio: use _cleanup_
2013-03-13 22:50:04 -04:00
fileio.h
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
hashmap.c
binfmt,tmpfiles,modules-load,sysctl: rework the various early-boot services that work on .d/ directories
2013-02-11 23:54:30 +01:00
hashmap.h
binfmt,tmpfiles,modules-load,sysctl: rework the various early-boot services that work on .d/ directories
2013-02-11 23:54:30 +01:00
hwclock.c
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
hwclock.h
hwclock: always set the kernel's timezone
2012-09-17 16:56:26 +02:00
install-printf.c
install: allow %u an and %U specifiers in WantedBy/RequiredBy/Alias
2013-01-29 19:01:41 -05:00
install-printf.h
install: allow specifiers in WantedBy/RequiredBy/Alias
2013-01-29 19:01:41 -05:00
install.c
shared: conf-files - add root parameter
2013-02-08 10:23:04 +01:00
install.h
install: allow %u an and %U specifiers in WantedBy/RequiredBy/Alias
2013-01-29 19:01:41 -05:00
ioprio.h
move list.h, macro.h, ioprio.h to shared/
2012-04-10 19:47:00 +02:00
label.c
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
label.h
honor SELinux labels, when creating and writing config files
2013-02-14 16:19:38 +01:00
list.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
log.c
Revert "log: fix fallbacks to kmsg"
2013-02-27 14:33:50 +01:00
log.h
journal: new logging macros to include UNIT=
2013-01-06 13:52:48 -05:00
logs-show.c
journal,shared: add _cleanup_journal_close_
2013-03-18 19:49:30 -04:00
logs-show.h
logs-show: export logic to add matches for units
2013-03-13 19:53:29 -04:00
macro.h
journal,shared: add _cleanup_journal_close_
2013-03-18 19:49:30 -04:00
Makefile
build-sys: add stub makefiles to make emacs easier to use
2012-04-12 13:35:56 +02:00
missing.h
missing: define MS_REC and MS_SHARED if not defined already
2013-02-13 00:12:58 +01:00
mkdir.c
shared: fail mkdir_p if the target exists and is not a directory
2012-10-02 14:56:26 +02:00
mkdir.h
mkdir: provide all functions with and without selinux label application
2012-05-31 13:17:26 +02:00
output-mode.h
systemctl,loginctl,cgls: do not ellipsize cgroup members when --full is specified
2013-01-16 12:11:47 -05:00
pager.c
pager: add -M to $LESS to make the bottom line nicer
2013-03-07 21:43:28 +01:00
pager.h
pager: introduce "jump to end" option
2013-03-07 21:16:04 +01:00
path-lookup.c
path-lookup: downgrade again the messages where we log for units
2013-03-01 14:07:20 +01:00
path-lookup.h
core: move ManagerRunningAs to shared
2012-09-18 19:53:34 +02:00
path-util.c
binfmt,tmpfiles,modules-load,sysctl: rework the various early-boot services that work on .d/ directories
2013-02-11 23:54:30 +01:00
path-util.h
binfmt,tmpfiles,modules-load,sysctl: rework the various early-boot services that work on .d/ directories
2013-02-11 23:54:30 +01:00
polkit.c
build-sys: make PolicyKit support compile-time optional (was runtime-optional already)
2013-02-13 23:08:25 +01:00
polkit.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
ratelimit.c
ratelimit: fix off-by-one
2013-02-13 08:45:13 -05:00
ratelimit.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
replace-var.c
shared: add API for replacing @FOO@ style variables in strings
2012-11-14 22:21:16 +01:00
replace-var.h
shared: add API for replacing @FOO@ style variables in strings
2012-11-14 22:21:16 +01:00
selinux-util.c
build-sys: fix !HAVE_SELINUX case
2012-10-03 16:00:33 +02:00
selinux-util.h
selinux: rework selinux access check logic
2012-10-02 17:07:00 -04:00
set.c
shared: inline trivial auto-cleanup functions
2013-03-08 10:09:31 +01:00
set.h
shared: inline trivial auto-cleanup functions
2013-03-08 10:09:31 +01:00
socket-label.c
Revert "Implement SocketUser= and SocketGroup= for [Socket]"
2012-11-06 09:54:17 -05:00
socket-util.c
systemd-activate: add a socket-activation test tool
2013-02-27 22:10:14 -05:00
socket-util.h
systemd-activate: add a socket-activation test tool
2013-02-27 22:10:14 -05:00
sparse-endian.h
shared: move sparse-endian.h from journal
2012-10-22 18:08:48 +02:00
spawn-ask-password-agent.c
move more common files to shared/ and add them to shared.la
2012-04-12 02:39:37 +02:00
spawn-ask-password-agent.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
spawn-polkit-agent.c
build-sys: make PolicyKit support compile-time optional (was runtime-optional already)
2013-02-13 23:08:25 +01:00
spawn-polkit-agent.h
move more common files to shared/ and add them to shared.la
2012-04-12 02:39:37 +02:00
specifier.c
Move generic specifier functions to shared
2013-01-29 19:01:41 -05:00
specifier.h
Move generic specifier functions to shared
2013-01-29 19:01:41 -05:00
strbuf.c
use the same email address everywhere
2012-11-12 19:47:43 +01:00
strbuf.h
use the same email address everywhere
2012-11-12 19:47:43 +01:00
strv.c
shared: inline trivial auto-cleanup functions
2013-03-08 10:09:31 +01:00
strv.h
strv: fix STRV_FOREACH_PAIR macro definition
2013-03-15 16:49:07 +01:00
strxcpyx.c
udev: move string copy functions to shared/
2013-01-09 19:06:46 +01:00
strxcpyx.h
udev: move string copy functions to shared/
2013-01-09 19:06:46 +01:00
time-dst.c
timedatectl: properly print 30 minutes DST transitions
2012-11-11 16:55:25 +01:00
time-dst.h
timedatectl: properly print 30 minutes DST transitions
2012-11-11 16:55:25 +01:00
time-util.c
dbus: properly serialize calendar timer data
2013-01-10 00:56:32 +01:00
time-util.h
core: properly initialize kernel timestamp
2013-01-08 01:27:39 +01:00
unit-name.c
systemctl: be smarter when mangling snapshot names
2013-01-14 21:24:58 +01:00
unit-name.h
systemctl: be smarter when mangling snapshot names
2013-01-14 21:24:58 +01:00
utf8.c
bootctl: add boot loader and firmware interface tool
2013-02-11 19:35:52 +01:00
utf8.h
core: if the bootloader supports it, determine firmware and boot loader delay
2013-01-19 04:22:09 +01:00
util.c
Make PrivateTmp dirs also inaccessible from the outside
2013-03-20 14:08:41 -04:00
util.h
Make PrivateTmp dirs also inaccessible from the outside
2013-03-20 14:08:41 -04:00
utmp-wtmp.c
util: split-out path-util.[ch]
2012-05-08 02:33:10 +02:00
utmp-wtmp.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
virt.c
virt: check for /sys/hypervisor/type for detecting xen PV
2013-03-07 16:03:12 +01:00
virt.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00
watchdog.c
move more common files to shared/ and add them to shared.la
2012-04-12 02:39:37 +02:00
watchdog.h
use #pragma once instead of foo*foo #define guards
2012-07-19 12:30:59 +02:00