Zbigniew Jędrzejewski-Szmek c4708f1323 tmpfiles: introduce the concept of unsafe operations ... Various operations done by systemd-tmpfiles may only be safely done at boot (e.g. removal of X lockfiles in /tmp, creation of /run/nologin). Other operations may be done at any point in time (e.g. setting the ownership on /{run,var}/log/journal). This distinction is largely orthogonal to the type of operation. A new switch --unsafe is added, and operations which should only be executed during bootup are marked with an exclamation mark in the configuration files. systemd-tmpfiles.service is modified to use this switch, and guards are added so it is hard to re-start it by mistake. If we install a new version of systemd, we actually want to enforce some changes to tmpfiles configuration immediately. This should now be possible to do safely, so distribution packages can be modified to execute the "safe" subset at package installation time. /run/nologin creation is split out into a separate service, to make it easy to override. https://bugzilla.redhat.com/show_bug.cgi?id=1043212 https://bugzilla.redhat.com/show_bug.cgi?id=1045849		2013-12-24 15:48:06 -05:00
..
user	bus: install systemd-bus-proxyd unit files for compatibility with dbus1	2013-12-13 20:49:57 +01:00
.gitignore	bus: install unit files for new driver service	2013-12-17 15:42:33 +01:00
basic.target	units: add default units for system.slice, user.slice, machine.slice	2013-06-18 00:59:54 +02:00
bluetooth.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
busnames.target	units: install busnames.target by default	2013-12-03 01:18:26 +01:00
console-getty.service.m4.in	units: when spawning a getty configure TERM explicitly	2013-12-18 18:21:28 +01:00
console-shell.service.m4.in	core: optionally send SIGHUP in addition to the configured kill signal	2013-07-30 01:54:59 +02:00
container-getty@.service.m4.in	units: when spawning a getty configure TERM explicitly	2013-12-18 18:21:28 +01:00
cryptsetup.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
debug-shell.service.in	build-sys: add missing sed substitution for DEBUGTTY	2013-03-25 19:28:00 +01:00
dev-hugepages.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
dev-mqueue.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
emergency.service.in	core: optionally send SIGHUP in addition to the configured kill signal	2013-07-30 01:54:59 +02:00
emergency.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
final.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
getty.target	unit: link up getty configuration from man page and unit files	2012-11-20 20:10:30 +01:00
getty@.service.m4	units: when spawning a getty configure TERM explicitly	2013-12-18 18:21:28 +01:00
graphical.target	units: add explicit dependency on display-manager.service to graphical.target	2012-06-27 22:23:16 +02:00
halt-local.service.in	build-sys: make rc-local support part of SYSV compat	2013-01-04 23:26:20 +01:00
halt.target	units: rename halt/hibernate/kexec/poweroff/reboot/suspend to systed-xxx	2012-06-25 14:28:50 +02:00
hibernate.target	unit: rename BindTo= to BindsTo=	2012-07-13 23:34:40 +02:00
hybrid-sleep.target	logind: support for hybrid sleep (i.e. suspend+hibernate at the same time)	2012-10-28 00:50:35 +02:00
initrd-cleanup.service.in	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
initrd-fs.target	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
initrd-parse-etc.service.in	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
initrd-root-fs.target	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
initrd-switch-root.service.in	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
initrd-switch-root.target	Make initrd.target the default target in the initrd	2013-03-15 00:49:37 +01:00
initrd-udevadm-cleanup-db.service.in	Move udevadm to rootbindir	2013-03-11 07:18:33 +01:00
initrd.target	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
kexec.target	units: rename halt/hibernate/kexec/poweroff/reboot/suspend to systed-xxx	2012-06-25 14:28:50 +02:00
kmod-static-nodes.service.in	static-nodes: don't call mkdir	2013-10-17 19:53:44 +02:00
local-fs-pre.target	units: disallow manual starting of passive units	2013-03-26 15:15:39 +01:00
local-fs.target	core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable	2013-11-26 02:26:31 +01:00
machine.slice	logind: add infrastructure to keep track of machines, and move to slices	2013-06-20 03:49:59 +02:00
Makefile	build-sys: add small redirecting Makefiles to simplify compilation from within emacs	2010-05-17 01:44:03 +02:00
multi-user.target	units: initrd, multi-user - add a few more words to Description=	2013-03-16 16:29:29 +01:00
network-online.target	units: fix network-online.target fields	2013-03-29 18:31:07 +01:00
network.target	man: link in wiki documentation about network.target	2013-01-15 04:12:53 +01:00
nss-lookup.target	units: disallow manual starting of passive units	2013-03-26 15:15:39 +01:00
nss-user-lookup.target	units: disallow manual starting of passive units	2013-03-26 15:15:39 +01:00
org.freedesktop.DBus.busname	bus: install unit files for new driver service	2013-12-17 15:42:33 +01:00
org.freedesktop.hostname1.busname	units: ship busname units for the bus activated services we ship	2013-12-03 04:28:02 +01:00
org.freedesktop.locale1.busname	units: ship busname units for the bus activated services we ship	2013-12-03 04:28:02 +01:00
org.freedesktop.login1.busname	units: ship busname units for the bus activated services we ship	2013-12-03 04:28:02 +01:00
org.freedesktop.machine1.busname	units: ship busname units for the bus activated services we ship	2013-12-03 04:28:02 +01:00
org.freedesktop.timedate1.busname	units: ship busname units for the bus activated services we ship	2013-12-03 04:28:02 +01:00
paths.target	units: introduce new timers.target and paths.target to hook timer/path units into for boot	2013-03-25 21:28:30 +01:00
poweroff.target	units: rename halt/hibernate/kexec/poweroff/reboot/suspend to systed-xxx	2012-06-25 14:28:50 +02:00
printer.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
proc-sys-fs-binfmt_misc.automount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
proc-sys-fs-binfmt_misc.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
quotaon.service.in	build-sys: perform autodetection of quota-tools binaries	2012-09-11 01:43:48 +02:00
rc-local.service.in	build-sys: make rc-local support part of SYSV compat	2013-01-04 23:26:20 +01:00
reboot.target	units: rename halt/hibernate/kexec/poweroff/reboot/suspend to systed-xxx	2012-06-25 14:28:50 +02:00
remote-fs-pre.target	units: disallow manual starting of passive units	2013-03-26 15:15:39 +01:00
remote-fs.target	filesystem targets: disable default dependencies	2013-09-11 14:40:58 +02:00
rescue.service.m4.in	core: optionally send SIGHUP in addition to the configured kill signal	2013-07-30 01:54:59 +02:00
rescue.target	rescue: don't pull in sockets	2012-05-22 16:12:25 +02:00
rpcbind.target	units: disallow manual starting of passive units	2013-03-26 15:15:39 +01:00
serial-getty@.service.m4	units: when spawning a getty configure TERM explicitly	2013-12-18 18:21:28 +01:00
shutdown.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
sigpwr.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
sleep.target	units: stop sleep.target when it has done its job	2012-06-25 12:01:09 +02:00
slices.target	core: general cgroup rework	2013-06-27 04:17:34 +02:00
smartcard.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
sockets.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
sound.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
suspend.target	unit: rename BindTo= to BindsTo=	2012-07-13 23:34:40 +02:00
swap.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
sys-fs-fuse-connections.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
sys-kernel-config.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
sys-kernel-debug.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
sysinit.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
syslog.socket	service: ignore dependencies on $syslog and $local_fs in LSB scripts	2013-01-16 21:34:09 +01:00
system-update.target	man: document systemd-update-generator	2012-06-27 15:12:29 +02:00
system.slice	core: general cgroup rework	2013-06-27 04:17:34 +02:00
systemd-ask-password-console.path	units: introduce new timers.target and paths.target to hook timer/path units into for boot	2013-03-25 21:28:30 +01:00
systemd-ask-password-console.service.in	units: run systemd-ask-password-console.service after systemd-vconsole-setup.service	2013-03-06 15:39:37 +01:00
systemd-ask-password-wall.path	units: introduce new timers.target and paths.target to hook timer/path units into for boot	2013-03-25 21:28:30 +01:00
systemd-ask-password-wall.service.in	units: automatically respawn the core services	2012-06-28 12:18:04 +02:00
systemd-backlight@.service.in	fix lingering references to /var/lib/{backlight,random-seed}	2013-10-02 07:51:06 -04:00
systemd-binfmt.service.in	man: add documentation for the binfmt, modules-load, sysctl services	2012-05-31 16:00:34 +02:00
systemd-bus-driverd.service.in	units: limit caps for bus proxyd and driverd services	2013-12-23 20:37:00 +01:00
systemd-bus-proxyd.socket	units: properly make bus proxy socket of type Accept=yes	2013-12-16 21:06:57 +01:00
systemd-bus-proxyd@.service.in	units: limit caps for bus proxyd and driverd services	2013-12-23 20:37:00 +01:00
systemd-fsck-root.service.in	Remove FsckPassNo from systemd-fsck-root.service	2013-10-19 12:23:17 +02:00
systemd-fsck@.service.in	fstab-generator: Generate explicit dependencies on systemd-fsck@.service instead of using FsckPassNo	2013-10-19 12:23:17 +02:00
systemd-halt.service.in	man: document systemd-halt.service and friends	2012-06-26 17:50:29 +02:00
systemd-hibernate.service.in	man: document systemd-suspend.service	2012-06-26 17:33:11 +02:00
systemd-hostnamed.service.in	event: hook up sd-event with the service watchdog logic	2013-12-11 18:20:09 +01:00
systemd-hybrid-sleep.service.in	logind: support for hybrid sleep (i.e. suspend+hibernate at the same time)	2012-10-28 00:50:35 +02:00
systemd-initctl.service.in	man: document systemd-initctl	2012-06-26 00:15:59 +02:00
systemd-initctl.socket	man: properly document .socket units in man page	2012-06-27 01:06:35 +02:00
systemd-journal-flush.service.in	journal: replace implicit flushing of journal by explicit one	2012-07-11 02:41:16 +02:00
systemd-journal-gatewayd.service.in	journal: make gatewayd run under its own user ID	2013-03-05 19:15:31 +01:00
systemd-journal-gatewayd.socket	journal: add minimal journal gateway daemon based on GNU libmicrohttpd	2012-09-28 00:55:24 +02:00
systemd-journald.service.in	journald: port to sd-event and enable watchdog support	2013-12-11 20:55:09 +01:00
systemd-journald.socket	typo fixes in man and comments	2013-08-15 23:38:09 +02:00
systemd-kexec.service.in	man: document systemd-halt.service and friends	2012-06-26 17:50:29 +02:00
systemd-localed.service.in	event: hook up sd-event with the service watchdog logic	2013-12-11 18:20:09 +01:00
systemd-logind.service.in	event: hook up sd-event with the service watchdog logic	2013-12-11 18:20:09 +01:00
systemd-machined.service.in	units: systemd-machined now exits on idle and we shouldn't try to restart it then	2013-12-23 20:37:03 +01:00
systemd-modules-load.service.in	units: add the modules-load cmdline parameters to the unit conditions	2012-07-25 08:51:41 +02:00
systemd-networkd.service.in	units: run systemd-networkd.service only if CAP_NET_ADMIN capability is around	2013-12-18 18:21:27 +01:00
systemd-nspawn@.service.in	man,units: fix installation of systemd-nspawn@.service and add example	2013-11-09 19:02:53 -05:00
systemd-poweroff.service.in	man: document systemd-halt.service and friends	2012-06-26 17:50:29 +02:00
systemd-quotacheck.service.in	build-sys: perform autodetection of quota-tools binaries	2012-09-11 01:43:48 +02:00
systemd-random-seed.service.in	Fix obsolete references to systemd-random-seed-load.service	2013-09-23 11:41:30 +02:00
systemd-readahead-collect.service.in	man: document the readahead services	2012-06-26 18:16:00 +02:00
systemd-readahead-done.service.in	units: don't run readahead done timers in containers	2013-12-11 23:31:34 +01:00
systemd-readahead-done.timer	units: don't run readahead done timers in containers	2013-12-11 23:31:34 +01:00
systemd-readahead-drop.service	man: add Documentation= tags to all kinds of missing units	2012-06-27 01:07:04 +02:00
systemd-readahead-replay.service.in	man: document the readahead services	2012-06-26 18:16:00 +02:00
systemd-reboot.service.in	man: document systemd-halt.service and friends	2012-06-26 17:50:29 +02:00
systemd-remount-fs.service.in	man: link in API FS documentation from the wiki	2013-01-15 05:13:54 +01:00
systemd-rfkill@.service.in	rfkill: add new rfkill tool to save/restore rfkill state across reboots	2013-10-14 04:31:49 +02:00
systemd-shutdownd.service.in	man: properly document .socket units in man page	2012-06-27 01:06:35 +02:00
systemd-shutdownd.socket	man: properly document .socket units in man page	2012-06-27 01:06:35 +02:00
systemd-suspend.service.in	man: document systemd-suspend.service	2012-06-26 17:33:11 +02:00
systemd-sysctl.service.in	sysctl: allow overwriting of values specified in "later" files	2013-08-15 18:43:31 +02:00
systemd-timedated.service.in	event: hook up sd-event with the service watchdog logic	2013-12-11 18:20:09 +01:00
systemd-tmpfiles-clean.service.in	man: link systemd-tmpfiles-setup-dev.service	2013-04-23 12:55:44 +02:00
systemd-tmpfiles-clean.timer	man: link systemd-tmpfiles-setup-dev.service	2013-04-23 12:55:44 +02:00
systemd-tmpfiles-setup-dev.service.in	kmod-static-nodes: remain after exit	2013-07-22 17:11:19 +02:00
systemd-tmpfiles-setup.service.in	tmpfiles: introduce the concept of unsafe operations	2013-12-24 15:48:06 -05:00
systemd-udev-settle.service.in	udev: replace CAP_MKNOD by writable /sys condition	2013-08-17 19:07:42 +02:00
systemd-udev-trigger.service.in	udev: replace CAP_MKNOD by writable /sys condition	2013-08-17 19:07:42 +02:00
systemd-udevd-control.socket	udev: replace CAP_MKNOD by writable /sys condition	2013-08-17 19:07:42 +02:00
systemd-udevd-kernel.socket	udev: replace CAP_MKNOD by writable /sys condition	2013-08-17 19:07:42 +02:00
systemd-udevd.service.in	static-nodes: move creation of static nodes from udevd to tmpfiles	2013-07-08 21:26:24 +02:00
systemd-update-utmp-runlevel.service.in	utmp: turn systemd-update-utmp-shutdown.service into a normal runtime service	2013-05-16 00:19:03 +02:00
systemd-update-utmp.service.in	utmp: turn systemd-update-utmp-shutdown.service into a normal runtime service	2013-05-16 00:19:03 +02:00
systemd-user-sessions.service.in	man: document systemd-user-sessions.service	2012-06-25 17:34:50 +02:00
systemd-vconsole-setup.service.in	man: document systemd-vconsole-setup.service	2012-06-25 12:00:43 +02:00
time-sync.target	units: disallow manual starting of passive units	2013-03-26 15:15:39 +01:00
timers.target	units: introduce new timers.target and paths.target to hook timer/path units into for boot	2013-03-25 21:28:30 +01:00
tmp.mount	units: add reference to new wiki page to all api mount units	2013-01-15 18:14:13 +01:00
umount.target	units: introduce new Documentation= field and make use of it everywhere	2012-05-21 15:14:51 +02:00
user.slice	logind: add infrastructure to keep track of machines, and move to slices	2013-06-20 03:49:59 +02:00
user@.service.in	execute.c: always set $SHELL	2013-10-02 22:23:56 +02:00
x-.slice	build-sys: work around automake issue with files with a leading '-'	2013-07-02 23:15:49 -04:00