Ryan Wilson 219a6dbbf3 core: Fix time namespace in RestrictNamespaces= ...

RestrictNamespaces= would accept "time" but would not actually apply
seccomp filters e.g. systemd-run -p RestrictNamespaces=time unshare -T true
should fail but it succeeded.

This commit actually enables time namespace seccomp filtering.

2024-12-10 20:55:26 +01:00

..

ac-power

…

analyze

core/service: don't propagate stop jobs if RestartMode=direct (#34768)

2024-11-01 17:25:49 +01:00

ask-password

…

backlight

…

basic

basic: update syscall tables

2024-12-10 11:15:48 +09:00

battery-check

…

binfmt

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

bless-boot

Move bless-boot components to their own source subdirectory

2024-11-07 14:50:41 +01:00

boot

boot: exclude the trailing padding from initrd size in initrd_prepare()

2024-12-09 15:14:03 +01:00

bootctl

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

busctl

…

cgls

…

cgroups-agent

…

cgtop

…

core

core: improve finding OnSuccess=/OnFailure= dependent (#35468)

2024-12-10 20:48:09 +01:00

coredump

coredump: rename gather_pid_mount_tree_fd() → acquire_pid_mount_tree_fd()

2024-11-01 10:07:55 +01:00

creds

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

cryptenroll

cryptenroll: advertise device autodetection and listing

2024-12-09 16:15:49 +01:00

cryptsetup

cryptsetup: add debug message

2024-12-10 10:58:58 +01:00

debug-generator

…

delta

…

detect-virt

…

dissect

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

environment-d-generator

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

escape

…

firstboot

firstboot: generalize prompt_loop more

2024-10-30 20:13:56 +01:00

fsck

Undeprecate commandline params forcequotacheck, fastboot, and forcefsck

2024-11-23 17:30:56 +09:00

fstab-generator

…

fundamental

fundamental: Fix buffer size in get_chid

2024-11-08 00:53:26 +03:00

fuzz

sd-varlink: add sd_varlink_server_set_info

2024-12-10 10:43:14 +01:00

getty-generator

…

gpt-auto-generator

…

growfs

Move growfs+makefs to src/growfs/

2024-11-10 14:09:46 +01:00

hibernate-resume

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

home

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

hostname

sd-varlink: add function to configure server object info (#35519)

2024-12-10 15:26:24 +00:00

hwdb

…

id128

…

import

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

initctl

…

integritysetup

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

journal

journald: extend STDOUT_STREAMS_MAX to 64k

2024-12-10 20:49:42 +01:00

journal-remote

…

kernel-install

kernel-install: remove .extra.d/ directory too

2024-12-01 14:05:45 +09:00

keyutil

Introduce systemd-keyutil to do various key/certificate operations

2024-11-08 15:00:21 +01:00

libsystemd

sd-varlink: modernize pointer style in function signatures

2024-12-10 10:51:56 +01:00

libsystemd-network

ndisc-option: use memcpy_safe() at one more place

2024-11-19 04:04:14 +09:00

libudev

…

locale

…

login

logind-session: be more specific about session_kill() errors

2024-11-13 17:49:07 +01:00

machine

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

machine-id-setup

…

measure

measure: add 'dtbauto' option in help message

2024-11-23 12:43:34 +00:00

modules-load

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

mount

…

mountfsd

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

network

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

notify

sd-daemon: add fd array size safety check to sd_notify_with_fds()

2024-11-04 12:10:09 +01:00

nspawn

nspawn: make sure --private-users-ownership=no and =off work the same way

2024-11-28 00:47:14 +09:00

nsresourced

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

nss-myhostname

…

nss-mymachines

…

nss-resolve

json-util: generalize json_dispatch_ifindex()

2024-11-04 11:42:37 +01:00

nss-systemd

…

oom

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

path

…

pcrextend

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

pcrlock

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

portable

portable: do not use SYNTHETIC_ERRNO for sd_bus_error_set_errno()

2024-11-13 17:47:11 +01:00

pstore

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

quotacheck

Undeprecate commandline params forcequotacheck, fastboot, and forcefsck

2024-11-23 17:30:56 +09:00

random-seed

…

rc-local-generator

…

remount-fs

…

repart

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

reply-password

…

resolve

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

rfkill

…

rpm

…

run

basic/user-util: split out placeholder suppression from USER_CREDS_CLEAN into its own flag

2024-11-19 00:38:18 +01:00

run-generator

…

sbsign

sbsign: remove unused --no-pager option

2024-11-12 17:52:48 +01:00

shared

core: Fix time namespace in RestrictNamespaces=

2024-12-10 20:55:26 +01:00

shutdown

shutdown: propagate one more error from sync_making_progress()

2024-11-23 17:32:51 +09:00

sleep

efivars: Remove STRINGIFY() helper macros

2024-11-02 23:20:57 +01:00

socket-activate

…

socket-proxy

…

ssh-generator

ssh-generator: silence "Binding to socket" messages

2024-11-19 11:00:20 +01:00

stdio-bridge

…

storagetm

…

sulogin-shell

…

sysctl

…

sysext

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

system-update-generator

…

systemctl

systemctl: use correct runtime scope

2024-12-09 14:16:37 +00:00

systemd

sd-varlink: modernize pointer style in function signatures

2024-12-10 10:51:56 +01:00

sysupdate

sysupdate: fix typo in DBus config

2024-12-07 11:33:29 +00:00

sysusers

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

sysv-generator

…

test

core: Fix time namespace in RestrictNamespaces=

2024-12-10 20:55:26 +01:00

timedate

…

timesync

…

tmpfiles

tmpfiles: Implement L? to only create symlinks if source exists

2024-11-04 19:04:21 +01:00

tpm2-setup

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

tty-ask-password-agent

…

udev

tree-wide: use Device*T*ree spelling

2024-11-06 15:00:55 +01:00

ukify

ukify: ellipsize CN to not exceed maximum length

2024-12-02 16:55:57 +00:00

update-done

sysext: set SELinux context for hierarchies and workdir

2024-11-26 17:47:32 +00:00

update-utmp

…

user-sessions

…

userdb

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

varlinkctl

…

vconsole

…

veritysetup

various: check meson feature flag early

2024-11-13 08:21:33 +09:00

version

…

vmspawn

vmspawn: enable memory pressure logic for vmspawn

2024-11-19 10:12:03 +01:00

volatile-root

…

vpick

…

xdg-autostart-generator

…