shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-07 09:56:51 +03:00
Code
092b6e188b
systemd/src/core/system.conf

60 lines
1.5 KiB
Plaintext
Raw Normal View History

main: implement manager configuration file
2010-07-07 03:10:27 +04:00
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
relicense to LGPLv2.1 (with exceptions) We finally got the OK from all contributors with non-trivial commits to relicense systemd from GPL2+ to LGPL2.1+. Some udev bits continue to be GPL2+ for now, but we are looking into relicensing them too, to allow free copy/paste of all code within systemd. The bits that used to be MIT continue to be MIT. The big benefit of the relicensing is that closed source code may now link against libsystemd-login.so and friends.
2012-04-12 02:20:58 +04:00
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
main: implement manager configuration file
2010-07-07 03:10:27 +04:00
# (at your option) any later version.
#
Do not advertise .d snippets over main config file For daemons which have a main configuration file, there's little reason for the administrator to use configuration snippets. They are useful for packagers which need to override settings, but we shouldn't advertise that as the main way of configuring those services. https://bugs.freedesktop.org/show_bug.cgi?id=89397
2015-03-04 03:10:21 +03:00
# Entries in this file show the compile time defaults.
# You can change settings by editing this file.
# Defaults can be restored by simply deleting this file.
core: Support system.conf.d and user.conf.d directories in the usual search paths
2014-11-29 12:06:04 +03:00
#
Do not advertise .d snippets over main config file For daemons which have a main configuration file, there's little reason for the administrator to use configuration snippets. They are useful for packagers which need to override settings, but we shouldn't advertise that as the main way of configuring those services. https://bugs.freedesktop.org/show_bug.cgi?id=89397
2015-03-04 03:10:21 +03:00
# See systemd-system.conf(5) for details.
main: implement manager configuration file
2010-07-07 03:10:27 +04:00
[Manager]
#LogLevel=info
core: switch all log targets to go directly to the journal, instead via syslog
2012-01-12 08:09:06 +04:00
#LogTarget=journal-or-kmsg
main: implement manager configuration file
2010-07-07 03:10:27 +04:00
#LogColor=yes
#LogLocation=no
#DumpCore=yes
#ShowStatus=yes
core: rework crash handling This introduces a new systemd.crash_reboot=1 kernel command line option that triggers a reboot after crashing. This also cleans up crash VT handling. Specifically, it cleans up the configuration setting, to be between 1..63 or a boolean. This is to replace the previous logic where "-1" meant disabled. We continue to accept that setting, but only document the boolean syntax instead. This also brings the documentation of the default settings in sync with what actually happens. The CrashChVT= configuration file setting is renamed to CrashChangeVT=, following our usual logic of not abbreviating unnecessarily. The old setting stays support for compat reasons. Fixes #1300
2015-09-24 00:13:06 +03:00
#CrashChangeVT=no
#CrashShell=no
#CrashReboot=no
main: implement manager configuration file
2010-07-07 03:10:27 +04:00
#CPUAffinity=1 2
core: drop some out-of-date references to cgroup settings
2013-09-27 00:49:44 +04:00
#JoinControllers=cpu,cpuacct net_cls,net_prio
watchdog: fix default configuration fragment for watchdog
2012-04-21 17:47:38 +04:00
#RuntimeWatchdogSec=0
#ShutdownWatchdogSec=10min
main: add configuration option to alter capability bounding set for PID 1 This also ensures that caps dropped from the bounding set are also dropped from the inheritable set, to be extra-secure. Usually that should change very little though as the inheritable set is empty for all our uses anyway.
2012-05-24 06:00:56 +04:00
#CapabilityBoundingSet=
core: add a system-wide SystemCallArchitectures= setting This is useful to prohibit execution of non-native processes on systems, for example 32bit binaries on 64bit systems, this lowering the attack service on incorrect syscall and ioctl 32→64bit mappings.
2014-02-13 04:35:27 +04:00
#SystemCallArchitectures=
main: allow setting of timer slack for PID 1
2012-05-31 06:36:08 +04:00
#TimerSlackNSec=
core: add a setting to globally control the default for timer unit accuracy
2014-03-24 19:22:34 +04:00
#DefaultTimerAccuracySec=1min
core: add a system-wide SystemCallArchitectures= setting This is useful to prohibit execution of non-native processes on systems, for example 32bit binaries on 64bit systems, this lowering the attack service on incorrect syscall and ioctl 32→64bit mappings.
2014-02-13 04:35:27 +04:00
#DefaultStandardOutput=journal
#DefaultStandardError=inherit
Configurable Timeouts/Restarts default values https://bugs.freedesktop.org/show_bug.cgi?id=71132 Patch adds DefaultTimeoutStartSec, DefaultTimeoutStopSec, DefaultRestartSec configuration options to manager configuration file.
2013-11-04 20:47:43 +04:00
#DefaultTimeoutStartSec=90s
#DefaultTimeoutStopSec=90s
#DefaultRestartSec=100ms
manager: configurable StartLimit default values https://bugzilla.redhat.com/show_bug.cgi?id=821723
2013-11-08 19:01:22 +04:00
#DefaultStartLimitInterval=10s
#DefaultStartLimitBurst=5
manager: add DefaultEnvironment option This complements existing functionality of setting variables through 'systemctl set-environment', the kernel command line, and through normal environment variables for systemd in session mode.
2013-06-09 09:08:46 +04:00
#DefaultEnvironment=
core: add global settings for enabling CPUAccounting=, MemoryAccounting=, BlockIOAccounting= for all units at once
2014-02-25 02:50:10 +04:00
#DefaultCPUAccounting=no
#DefaultBlockIOAccounting=no
#DefaultMemoryAccounting=no
core: system.conf: add DefaultTasksAccounting
2015-10-08 17:48:45 +03:00
#DefaultTasksAccounting=no
main: add configuration option to alter capability bounding set for PID 1 This also ensures that caps dropped from the bounding set are also dropped from the inheritable set, to be extra-secure. Usually that should change very little though as the inheritable set is empty for all our uses anyway.
2012-05-24 06:00:56 +04:00
#DefaultLimitCPU=
#DefaultLimitFSIZE=
#DefaultLimitDATA=
#DefaultLimitSTACK=
#DefaultLimitCORE=
#DefaultLimitRSS=
#DefaultLimitNOFILE=
#DefaultLimitAS=
#DefaultLimitNPROC=
#DefaultLimitMEMLOCK=
#DefaultLimitLOCKS=
#DefaultLimitSIGPENDING=
#DefaultLimitMSGQUEUE=
#DefaultLimitNICE=
#DefaultLimitRTPRIO=
#DefaultLimitRTTIME=
Copy Permalink