shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2024-12-23 17:34:00 +03:00
Code
Backports of patch from systemd git to stable distributions
34,047 Commits 36 Branches 651 Tags 227 MiB
C 89.4%
Python 5.8%
Shell 2.1%
Meson 1.3%
HTML 0.9%
Other 0.4%
705268414f
Go to file
Lennart Poettering 705268414f seccomp: add new system call filter, suitable as default whitelist for system services 
Currently we employ mostly system call blacklisting for our system
services. Let's add a new system call filter group @system-service that
helps turning this around into a whitelist by default.

The new group is very similar to nspawn's default filter list, but in
some ways more restricted (as sethostname() and suchlike shouldn't be
available to most system services just like that) and in others more
relaxed (for example @keyring is blocked in nspawn since it's not
properly virtualized yet in the kernel, but is fine for regular system
services).
2018-06-14 17:44:20 +02:00
.github github: use multiple issue templates 2018-05-10 07:58:38 -07:00
.mkosi mkosi: add mkosi snippet for ubuntu, too 2018-06-14 17:44:20 +02:00
catalog Drop my copyright headers 2018-06-14 13:03:20 +02:00
coccinelle tree-wide: drop !! casts to booleans 2018-06-13 10:52:40 +02:00
doc Drop my copyright headers 2018-06-14 13:03:20 +02:00
factory/etc factory: remove broken pam_limits 2014-07-30 15:21:54 +02:00
hwdb Drop my copyright headers 2018-06-14 13:03:20 +02:00
man seccomp: add new system call filter, suitable as default whitelist for system services 2018-06-14 17:44:20 +02:00
modprobe.d Add SPDX license headers to various assorted files 2017-11-19 19:08:15 +01:00
network Drop my copyright headers 2018-06-14 13:03:20 +02:00
po Drop my copyright headers 2018-06-14 13:03:20 +02:00
presets Drop my copyright headers 2018-06-14 13:03:20 +02:00
rules Drop my copyright headers 2018-06-14 13:03:20 +02:00
shell-completion Drop my copyright headers 2018-06-14 13:03:20 +02:00
src seccomp: add new system call filter, suitable as default whitelist for system services 2018-06-14 17:44:20 +02:00
sysctl.d Drop my copyright headers 2018-06-14 13:03:20 +02:00
sysusers.d Drop my copyright headers 2018-06-14 13:03:20 +02:00
test Drop my copyright headers 2018-06-14 13:03:20 +02:00
tmpfiles.d Drop my copyright headers 2018-06-14 13:03:20 +02:00
tools Merge pull request #9301 from keszybz/man-drop-authorgroup 2018-06-14 15:29:24 +02:00
travis-ci travis: use Fedora 27 as a base image 2018-06-05 12:03:18 +03:00
units Drop my copyright headers 2018-06-14 13:03:20 +02:00
xorg login: avoid external process call 2018-01-12 18:02:57 +01:00
.dir-locals.el meson: also indent scripts with 8 spaces 2017-04-25 08:49:16 -04:00
.editorconfig editorconfig: add rule for meson.build files (#6671) 2017-08-28 16:37:23 +02:00
.gitattributes git: indicate that tabs are never OK in the systemd tree 2013-10-30 02:25:38 +01:00
.gitignore Add mkosi.output/ to .gitignore 2017-11-29 14:33:56 +01:00
.mailmap NEWS: some .mailmap work to clean up contributors list 2018-06-13 14:20:03 +02:00
.travis.yml Merge pull request #9193 from keszybz/coverity 2018-06-14 09:59:58 +02:00
.vimrc vimrc: fix indentation logic for our docbook xml files 2016-04-29 12:23:34 +02:00
.ycm_extra_conf.py ycm: add doc string for all the functions in configuration file 2017-11-29 13:21:49 -07:00
configure build-sys: add basic support for ./configure && make && make install 2017-07-18 10:05:06 -04:00
LICENSE.GPL2 relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
LICENSE.LGPL2.1 licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
Makefile build-sys: Fix Makefile wrapper for install target (#6548) 2017-08-07 11:29:20 +02:00
meson_options.txt Drop my copyright headers 2018-06-14 13:03:20 +02:00
meson.build Drop my copyright headers 2018-06-14 13:03:20 +02:00
mkosi.build tree-wide: remove Lennart's copyright lines 2018-06-14 10:20:20 +02:00
mkosi.default mkosi: create .mkosi directory 2016-10-06 11:53:58 -04:00
NEWS resolve: rename PrivateDNS to DNSOverTLS 2018-06-14 09:57:56 +02:00
README Turn VALGRIND variable into a meson configuration switch 2018-05-17 09:54:36 -07:00
README.md README.md: embed the Travis CI badge 2018-06-07 17:53:43 +00:00
TODO Merge pull request #9199 from poettering/copy-file-atomic 2018-06-14 11:19:22 +02:00
zanata.xml po: add basic fedora.zanata.org configuration 2018-02-19 13:56:57 +01:00

README.md

systemd - System and Service Manager

Count of open issues over time Count of open pull requests over time Build Status
Coverity Scan Status
CII Best Practices
Build Status

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements are provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the HACKING file for information how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.

Stable branches with backported patches are available in the stable repo.