1
1
mirror of https://github.com/systemd/systemd-stable.git synced 2024-10-27 18:55:09 +03:00
Backports of patch from systemd git to stable distributions
Go to file
Lennart Poettering 3242980582 core: create per-user inaccessible node from the service manager
Previously, we'd create them from user-runtime-dir@.service. That has
one benefit: since this service runs privileged, we can create the full
set of device nodes. It has one major drawback though: it security-wise
problematic to create files/directories in directories as privileged
user in directories owned by unprivileged users, since they can use
symlinks to redirect what we want to do. As a general rule we hence
avoid this logic: only unpriv code should populate unpriv directories.

Hence, let's move this code to an appropriate place in the service
manager. This means we lose the inaccessible block device node, but
since there's already a fallback in place, this shouldn't be too bad.
2020-08-20 10:18:02 +02:00
.github
.lgtm/cpp-queries
.mkosi Update mkosi.ubuntu to 'focal' 2020-07-23 16:44:09 +02:00
catalog catalog: update Polish translation 2020-07-26 11:28:29 +02:00
coccinelle
docs doc: document what we now place in /run/host 2020-08-20 10:17:59 +02:00
factory/etc man: move 'files' module in NSS 'hosts:' line before myhostname 2020-08-17 18:55:59 +02:00
hwdb.d hwdb: ACCEL_MOUNT_MATRIX quirk for Acer SP111-32* 2020-08-17 18:57:53 +02:00
man basic/virt: treat "pouch" as a container type (id: pouch) 2020-08-20 09:48:13 +02:00
modprobe.d
network
po
presets
rules.d
semaphoreci semaphoreci: update Debian release to bullseye 2020-07-24 01:45:44 +03:00
shell-completion homed: default to "btrfs" as fs type in the LUKS backend 2020-08-19 15:46:07 +02:00
src core: create per-user inaccessible node from the service manager 2020-08-20 10:18:02 +02:00
sysctl.d
sysusers.d
test nspawn: move $NOTIFY_SOCKET into /run/host/ too 2020-08-20 10:17:48 +02:00
tmpfiles.d
tools tools/make-man-index: fix purpose text that contains tags 2020-08-17 18:32:51 +02:00
travis-ci travis: compile with -O1 with clang 2020-07-21 02:00:04 +09:00
units units: order volatile-root after repart 2020-08-11 09:12:56 +02:00
xorg
.clang-format clang-format: set Break afer enum to false 2020-07-19 15:44:04 +02:00
.ctags
.dir-locals.el
.editorconfig editorconfig: add man configuration 2020-05-26 15:37:05 +02:00
.gitattributes
.gitignore
.lgtm.yml
.mailmap NEWS: update contributors list for v246-pre 2020-07-23 17:30:54 +02:00
.travis.yml
.vimrc
.ycm_extra_conf.py
azure-pipelines.yml
configure
LICENSE.GPL2
LICENSE.LGPL2.1
Makefile
meson_options.txt
meson.build Merge pull request #16771 from poettering/dyn-pwq 2020-08-19 15:40:41 +02:00
mkosi.build
NEWS NEWS: clarify two points 2020-08-01 11:54:26 +02:00
README meson: add min version for libfdisk 2020-08-19 10:18:33 +02:00
README.md
TODO update TODO 2020-08-19 10:04:08 +02:00
zanata.xml

Systemd

System and Service Manager

Count of open issues over time Count of open pull requests over time Semaphore CI Build Status
Coverity Scan Status
OSS-Fuzz Status
CIFuzz
CII Best Practices
Travis CI Build Status
Language Grade: C/C++
CentOS CI Build Status
Build Status
Fossies codespell report
Packaging status

Details

Most documentation is available on systemd's web site.

Assorted, older, general information about systemd can be found in the systemd Wiki.

Information about build requirements is provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the Hacking guide for information on how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.

Stable branches with backported patches are available in the stable repo.