Yu Watanabe 627d1a9ac1 core: Add ProtectHostname=private (#35447) ...

This PR allows an option for systemd exec units to enable UTS namespaces
but not restrict changing hostname via seccomp. Thus, units can change
hostname without affecting the host. This is useful for OS-like
containers running as units where they should have freedom to change
their container hostname if they want, but not the host's hostname.

Fixes: #30348

2024-12-11 10:17:25 +09:00

..

bpf

bpf-socket-bind: fix unexpected behavior with either 0 allow or deny rules

2024-03-24 11:08:58 +00:00

all-units.h

…

apparmor-setup.c

…

apparmor-setup.h

…

audit-fd.c

…

audit-fd.h

…

automount.c

core/manager: introduce manager_add_job_full() which takes extra TransactionAddFlags

2024-10-27 20:02:46 +01:00

automount.h

…

bpf-devices.c

basic/linux: update kernel headers from v6.10-rc3

2024-06-20 02:35:35 +09:00

bpf-devices.h

cgroup: turn device cgroup controller "rwm" strings into proper flags

2023-10-17 23:27:01 +01:00

bpf-firewall.c

core/cgroup: call bpf_firewall_close in cgroup_runtime_free

2024-06-28 15:38:56 +02:00

bpf-firewall.h

core/cgroup: call bpf_firewall_close in cgroup_runtime_free

2024-06-28 15:38:56 +02:00

bpf-foreign.c

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

bpf-foreign.h

…

bpf-restrict-fs.c

bpf: add helper to translate kernel error codes from libbpf

2024-05-29 08:29:47 +02:00

bpf-restrict-fs.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

bpf-restrict-ifaces.c

fdset: optionally, close remaining fds asynchronously

2024-10-17 09:48:05 +02:00

bpf-restrict-ifaces.h

core: rename restrict-ifaces.[ch] → bpf-restrict-ifaces.[ch]

2024-01-25 16:11:33 +01:00

bpf-socket-bind.c

fdset: optionally, close remaining fds asynchronously

2024-10-17 09:48:05 +02:00

bpf-socket-bind.h

bpf-socket-bind: rename bpf_serialize_socket_bind() → bpf_socket_bind_serialize()

2024-01-25 16:11:33 +01:00

bpf-util.c

tree-wise: several cleanups for logging

2024-05-01 04:41:06 +09:00

bpf-util.h

…

cgroup.c

core/cgroup: rename CGROUP_PRESSURE_WATCH_ON/OFF -> CGROUP_PRESSURE_WATCH_YES/NO

2024-10-27 03:04:35 +09:00

cgroup.h

core/cgroup: rename CGROUP_PRESSURE_WATCH_ON/OFF -> CGROUP_PRESSURE_WATCH_YES/NO

2024-10-27 03:04:35 +09:00

clock-warp.c

manager: add structured log message about clock bump

2024-06-15 16:54:37 +02:00

clock-warp.h

manager: apply clock epoch on updates too

2024-06-15 16:20:16 +02:00

core-varlink.c

various: set info on varlink server object

2024-12-10 10:51:56 +01:00

core-varlink.h

core: reliably check if varlink socket has been deserialized

2024-07-23 19:38:57 +02:00

crash-handler.c

crash-handler: Add back notice log message

2024-08-26 16:36:39 +02:00

crash-handler.h

…

dbus-automount.c

…

dbus-automount.h

…

dbus-cgroup.c

Merge pull request #34787 from yuwata/core-ip-address-allow-deny

2024-10-21 16:35:49 +02:00

dbus-cgroup.h

…

dbus-device.c

…

dbus-device.h

…

dbus-execute.c

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

dbus-execute.h

manager: switch service unit type over to using new handoff timestamping logic

2024-04-25 13:40:41 +02:00

dbus-job.c

core: switch j->unit->manager to j->manager

2024-04-18 20:25:39 +08:00

dbus-job.h

…

dbus-kill.c

…

dbus-kill.h

…

dbus-manager.c

dbus-manager: add missing word 'unit' to PK message

2024-11-12 23:09:01 +01:00

dbus-manager.h

…

dbus-mount.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-mount.h

…

dbus-path.c

…

dbus-path.h

…

dbus-scope.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-scope.h

…

dbus-service.c

core: move debug logging from _can_live_mount() functions to caller

2024-10-16 10:50:15 +02:00

dbus-service.h

…

dbus-slice.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-slice.h

…

dbus-socket.c

core: Use RateLimit struct to store ratelimits

2024-08-14 14:18:40 +02:00

dbus-socket.h

…

dbus-swap.c

core: cast ignored retval of unit_realize_cgroup to void

2024-06-28 15:43:21 +02:00

dbus-swap.h

…

dbus-target.c

…

dbus-target.h

…

dbus-timer.c

timer: introduce DeferReactivation setting

2024-10-11 22:54:16 +02:00

dbus-timer.h

…

dbus-unit.c

core/manager: introduce manager_add_job_full() which takes extra TransactionAddFlags

2024-10-27 20:02:46 +01:00

dbus-unit.h

…

dbus-util.c

core/dbus: add assertions

2024-10-09 06:57:11 +09:00

dbus-util.h

core/dbus: introduce bus_verify_manage_units_async_impl()

2024-10-09 06:55:32 +09:00

dbus.c

core/manager: introduce manager_add_job_full() which takes extra TransactionAddFlags

2024-10-27 20:02:46 +01:00

dbus.h

core/dbus: move bus_verify_xyz() to dbus-util.c

2024-10-09 06:54:45 +09:00

device.c

core/device: ignore ID_PROCESSING udev property on enumerate

2024-11-25 15:33:48 +09:00

device.h

core/device: prefix DEVICE_FOUND_MASK with '_'

2024-07-21 22:48:52 +02:00

dynamic-user.c

Drop support for nscd

2024-06-28 18:51:56 +02:00

dynamic-user.h

exec-invoke: don't double-close FDs on error

2023-10-28 16:56:25 +02:00

efi-random.c

efivars: Remove STRINGIFY() helper macros

2024-11-02 23:20:57 +01:00

efi-random.h

…

emergency-action.c

terminal-util: split out color macros/helpers into its own header

2024-07-19 11:44:04 +02:00

emergency-action.h

core: refuse invalid emergency actions for SuccessAction= and friends in user service manager

2024-05-18 02:51:34 +09:00

exec-credential.c

core/dbus-service: refuse bind mounting over /run/credentials/

2024-08-17 18:16:20 +02:00

exec-credential.h

core/dbus-service: refuse bind mounting over /run/credentials/

2024-08-17 18:16:20 +02:00

exec-invoke.c

core: Add ProtectHostname=private

2024-12-06 13:34:04 -08:00

exec-invoke.h

core: move code from execute.c to exec-invoke.c

2023-10-12 15:01:51 +01:00

execute-serialize.c

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

execute-serialize.h

core: add serialization/deserialization for CGroupContext

2023-10-12 14:57:38 +01:00

execute.c

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

execute.h

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

executor.c

core: clean up ambient capability logging

2024-07-31 21:40:28 +02:00

fuzz-execute-serialize.c

Add ExtraFileDescriptor property to StartTransientUnit dbus API

2024-10-07 09:01:48 -07:00

fuzz-manager-serialize.c

fuzz: unify logging setup

2023-10-19 10:05:20 +01:00

fuzz-manager-serialize.options

fuzz: limit size for fuzz-manager-serialize

2023-10-02 14:23:34 +01:00

fuzz-unit-file.c

fuzz: unify logging setup

2023-10-19 10:05:20 +01:00

fuzz-unit-file.options

…

generator-setup.c

generator-setup: use RET_GATHER()

2024-05-29 11:52:40 +02:00

generator-setup.h

…

ima-setup.c

…

ima-setup.h

…

import-creds.c

core/import-creds: use proc_cmdline_get_bool()

2024-07-13 22:58:23 +02:00

import-creds.h

…

ipe-setup.c

core: load IPE policy on boot

2024-10-02 18:29:43 +02:00

ipe-setup.h

core: load IPE policy on boot

2024-10-02 18:29:43 +02:00

job.c

core: make refuse_late_merge a proper attr of Job and introduce TRANSACTION_REENQUEUE_ANCHOR

2024-10-27 20:02:47 +01:00

job.h

core: make refuse_late_merge a proper attr of Job and introduce TRANSACTION_REENQUEUE_ANCHOR

2024-10-27 20:02:47 +01:00

kill.c

Fix confusion between killer and prey

2024-06-19 16:22:23 +02:00

kill.h

various: move const ptr indicator to return value

2024-06-19 16:28:28 +02:00

kmod-setup.c

use FOREACH_ELEMENT

2024-04-18 17:39:34 +02:00

kmod-setup.h

…

load-dropin.c

tree-wide: use strv_extend_strv_consume() where appropriate

2024-09-21 00:53:50 +02:00

load-dropin.h

core/unit: do not use unit path cache in unit_need_daemon_reload()

2024-08-09 19:25:42 +09:00

load-fragment-gperf-nulstr.awk

…

load-fragment-gperf.gperf.in

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

load-fragment.c

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

load-fragment.h

core: Migrate ProtectHostname to use enum vs boolean

2024-12-06 13:33:49 -08:00

main.c

pid1: make clear that $WATCHDOG_USEC is set for the shutdown binary, noone else

2024-11-15 13:34:06 +00:00

main.h

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

manager-dump.c

meson: Start adding devel and rc suffixes to the project version

2024-02-14 15:36:34 +01:00

manager-dump.h

…

manager-serialize.c

core/manager-serialize: drop serialization for Manager.ready_sent

2024-10-11 10:36:08 +02:00

manager-serialize.h

…

manager.c

core/manager: silence false-positive warning by coverity

2024-11-06 13:47:33 +00:00

manager.h

core: Introduce PrivatePIDs=

2024-11-05 05:32:02 -08:00

meson.build

core: load IPE policy on boot

2024-10-02 18:29:43 +02:00

mount.c

core/service: preserve RuntimeDirectory= even if oneshot service exits

2024-12-02 10:57:45 +01:00

mount.h

Revert "core/credential,mount: re-read /proc/self/mountinfo before invoking umount command"

2024-06-12 00:54:26 +01:00

namespace.c

core: Add ProtectHostname=private

2024-12-06 13:34:04 -08:00

namespace.h

core: Add ProtectHostname=private

2024-12-06 13:34:04 -08:00

org.freedesktop.systemd1.conf

…

org.freedesktop.systemd1.policy.in

…

org.freedesktop.systemd1.service

…

path.c

core/manager: introduce manager_add_job_full() which takes extra TransactionAddFlags

2024-10-27 20:02:46 +01:00

path.h

…

scope.c

core: do BindMount/MountImage operations in async control process

2024-08-29 12:48:55 +01:00

scope.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

selinux-access.c

core/selinux-access: use empty_to_na where appropriate

2024-05-02 13:36:52 +08:00

selinux-access.h

…

selinux-setup.c

selinux: kill mac_selinux_free()

2024-06-12 15:21:21 +02:00

selinux-setup.h

…

service.c

core: improve finding OnSuccess=/OnFailure= dependent (#35468)

2024-12-10 20:48:09 +01:00

service.h

core/service: place occurrences of SERVICE_MOUNTING closer to reload states

2024-10-22 19:19:47 +02:00

show-status.c

pid1: use $COLUMNS info in status_vprintf()

2024-07-19 11:44:05 +02:00

show-status.h

…

slice.c

core/slice: simplify slice_freezer_action a bit

2024-07-17 17:25:23 +02:00

slice.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

smack-setup.c

…

smack-setup.h

…

socket.c

core/service: preserve RuntimeDirectory= even if oneshot service exits

2024-12-02 10:57:45 +01:00

socket.h

core: honor FileDescriptorName= too for Accept=yes sockets

2024-08-26 15:40:15 +02:00

swap.c

core/service: preserve RuntimeDirectory= even if oneshot service exits

2024-12-02 10:57:45 +01:00

swap.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

system.conf.in

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

systemd.pc.in

systemd.pc: Keep support for rootprefix and root_prefix (#30115)

2023-11-21 12:51:08 +00:00

taint.c

taint: Add taint_strv() to get taints as an array

2024-08-14 14:18:40 +02:00

taint.h

taint: Add taint_strv() to get taints as an array

2024-08-14 14:18:40 +02:00

target.c

core: use FOREACH_ARRAY at 3 more places

2024-04-10 23:40:53 +08:00

target.h

…

timer.c

core/manager: introduce manager_add_job_full() which takes extra TransactionAddFlags

2024-10-27 20:02:46 +01:00

timer.h

timer: introduce DeferReactivation setting

2024-10-11 22:54:16 +02:00

transaction.c

core: make refuse_late_merge a proper attr of Job and introduce TRANSACTION_REENQUEUE_ANCHOR

2024-10-27 20:02:47 +01:00

transaction.h

core: make refuse_late_merge a proper attr of Job and introduce TRANSACTION_REENQUEUE_ANCHOR

2024-10-27 20:02:47 +01:00

unit-dependency-atom.c

core: drop effectively unused UNIT_ATOM_PROPAGATE_RESTART

2024-10-27 20:02:46 +01:00

unit-dependency-atom.h

core: drop effectively unused UNIT_ATOM_PROPAGATE_RESTART

2024-10-27 20:02:46 +01:00

unit-printf.c

core: use strdup_to()

2024-03-20 15:18:21 +01:00

unit-printf.h

…

unit-serialize.c

tree-wide: replace for loop with FOREACH_ELEMENT or FOREACH_ARRAY macros (#34893)

2024-10-26 07:10:22 +09:00

unit-serialize.h

core: add serialization/deserialization for ExecContext

2023-10-12 14:56:23 +01:00

unit.c

core/service: preserve RuntimeDirectory= even if oneshot service exits

2024-12-02 10:57:45 +01:00

unit.h

core/service: preserve RuntimeDirectory= even if oneshot service exits

2024-12-02 10:57:45 +01:00

user.conf.in

…