Lennart Poettering 6db53d20f5 nspawn: lock down access to notify socket a bit ...

On Linux only the "w" access bit is necessary to connect to an AF_UNIX
socket, hence let's only set that and nothing else, to limit exposure.

Just paranoia.

2024-01-06 11:21:00 +09:00

..

ac-power

…

analyze

confext: make sure we pick up configuration extensions passed to us from the stub

2024-01-03 11:23:27 +01:00

ask-password

…

backlight

backlight: supprt ID_LEDS_CLAMP udev property for leds subsystem devices

2024-01-03 09:30:41 +09:00

basic

Merge pull request #30794 from poettering/parse-vsock-better

2024-01-06 11:16:19 +09:00

battery-check

…

binfmt

…

boot

stub: pick up confexts from the ESP as well

2024-01-03 10:38:34 +01:00

busctl

busctl: avoid asserting on NULL message

2023-12-24 15:04:28 +01:00

cgls

…

cgroups-agent

…

cgtop

…

core

core: escape spaces in paths during serialization

2024-01-06 11:19:59 +09:00

coredump

tree-wide: insert space after for and switch

2023-12-25 01:29:38 +09:00

creds

creds-util: optionally, allow NULL credentials even with TPM

2024-01-05 17:20:05 +01:00

cryptenroll

Merge pull request #30754 from poettering/iovecification

2024-01-05 14:45:15 +01:00

cryptsetup

tpm2-util: more iovec'ification

2024-01-05 11:34:46 +01:00

debug-generator

…

delta

tree-wide: drop space between variable and an increment/decrement

2023-12-25 01:56:40 +09:00

detect-virt

…

dissect

dissect: add assert to guide static analysis

2024-01-04 14:30:20 +01:00

environment-d-generator

…

escape

…

firstboot

tree-wide: drop space between variable and an increment/decrement

2023-12-25 01:56:40 +09:00

fsck

tree-wide: use SPECIAL_BASIC_TARGET

2024-01-04 15:22:42 +01:00

fstab-generator

fstab-generator: disable default deps if x-systemd.{wanted,required}-by= is used

2023-12-12 00:34:32 +08:00

fundamental

string-util-fundamental: postfix -> suffix, use streq

2024-01-04 16:30:10 +08:00

fuzz

test: make assert_return() critical by default on fuzzer and unit tests

2023-12-24 02:02:18 +09:00

getty-generator

various: clean up isatty() handling

2023-12-22 23:06:49 +08:00

gpt-auto-generator

…

hibernate-resume

tree-wide: use JSON_ALLOW_EXTENSIONS when disptching at various places

2024-01-05 12:43:06 +01:00

home

Merge pull request #30744 from poettering/logind-trivial-tweaks

2024-01-04 16:02:20 +01:00

hostname

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

hwdb

Add $SYSTEMD_HWDB_UPDATE_BYPASS (#30463)

2023-12-14 18:57:05 +09:00

id128

…

import

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

initctl

…

integritysetup

…

journal

journalctl: implement --list-namespaces

2024-01-05 19:21:51 +01:00

journal-remote

tree-wide: shorten a couple of ternary expressions

2023-12-25 18:26:59 +01:00

kernel-install

Merge pull request #30232 from keszybz/ukify-imports

2023-12-13 14:38:03 +01:00

libsystemd

Merge pull request #30759 from mrc0mmand/resolved-followup

2024-01-05 09:26:19 +01:00

libsystemd-network

sd-dhcp-client: add assert_not_reached in switch case

2024-01-04 14:30:20 +01:00

libudev

test: make assert_return() critical by default on fuzzer and unit tests

2023-12-24 02:02:18 +09:00

locale

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

login

login: noone -> no one

2024-01-05 19:08:12 +09:00

machine

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

machine-id-setup

…

modules-load

modules-load: simplify OOM check

2023-12-25 18:26:59 +01:00

mount

tree-wide: use device_in_subsystem() and device_is_devtype()

2023-12-23 03:52:21 +09:00

network

Merge pull request #30775 from yuwata/network-nexthop-is-ready

2024-01-06 08:27:35 +09:00

notify

…

nspawn

nspawn: lock down access to notify socket a bit

2024-01-06 11:21:00 +09:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

tree-wide: use JSON_ALLOW_EXTENSIONS when disptching at various places

2024-01-05 12:43:06 +01:00

nss-systemd

…

oom

oomd: make use of new JSON_DISPATCH_ENUM_DEFINE() macro

2024-01-05 12:08:37 +01:00

partition

tpm2-util: more iovec'ification

2024-01-05 11:34:46 +01:00

path

…

pcrextend

varlink: add helper varlink_error_invalid_parameter_name()

2023-12-21 19:22:46 +01:00

pcrlock

Merge pull request #30728 from polarina/noda

2024-01-05 11:04:11 +01:00

portable

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

pstore

fix: prefix of dmesg pstore files

2023-12-01 17:34:43 +00:00

quotacheck

…

random-seed

…

rc-local-generator

…

remount-fs

…

reply-password

…

resolve

resolve: initialize r during OOM

2024-01-04 20:56:21 +01:00

rfkill

…

rpm

…

run

run: use SPECIAL_USER_SLICE

2024-01-04 15:22:54 +01:00

run-generator

…

shared

dev-setup: rework make_inaccessible_nodes() around openat() and friends

2024-01-06 08:27:51 +09:00

shutdown

tree-wide: drop space between variable and an increment/decrement

2023-12-25 01:56:40 +09:00

sleep

sleep: don't log duplicate error

2023-12-27 22:38:43 +08:00

socket-activate

…

socket-proxy

…

stdio-bridge

stdio-bridge: return immediately if we can

2023-12-02 09:47:45 +01:00

storagetm

Merge pull request #30700 from yuwata/storagetm-fixlets

2024-01-03 08:42:58 +09:00

sulogin-shell

…

sysctl

…

sysext

confext: make sure we pick up configuration extensions passed to us from the stub

2024-01-03 11:23:27 +01:00

system-update-generator

…

systemctl

systemctl: use SYNTHETIC_ERRNO()

2023-12-25 19:51:43 +01:00

systemd

Merge pull request #30704 from yuwata/sd-dhcp-server-lease

2024-01-03 13:58:30 +01:00

sysupdate

…

sysusers

…

sysv-generator

tree-wide: drop space between variable and an increment/decrement

2023-12-25 01:56:40 +09:00

test

dev-setup: rework make_inaccessible_nodes() around openat() and friends

2024-01-06 08:27:51 +09:00

timedate

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

timesync

bus-polkit: port polkit_registry to use value destructors in hash_ops

2024-01-03 11:53:52 +01:00

tmpfiles

Merge pull request #30769 from AdrianVovk/statx-timestamp

2024-01-05 09:59:40 +01:00

tpm2-setup

tpm2-generator: sort includes

2024-01-04 20:33:32 +08:00

tty-ask-password-agent

…

udev

udevadm: allow to override the default log level by environment variable

2024-01-06 08:30:58 +09:00

ukify

ukify: make the test happy with the latest OpenSSL

2023-12-23 12:32:31 +01:00

update-done

…

update-utmp

…

user-sessions

…

userdb

format-table: introduce table_isempty and use it where appropriate

2023-12-25 17:47:18 +08:00

varlinkctl

…

vconsole

vconsole-setup: remember the correct error value when open_terminal() fails

2023-12-18 15:48:56 +01:00

veritysetup

…

version

…

vmspawn

machine-credential: introduce MachineCredentialContext

2023-12-14 08:50:44 +00:00

volatile-root

…

vpick

vpick-tool: sort includes

2024-01-04 23:35:13 +08:00

xdg-autostart-generator

…