shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-02 19:21:53 +03:00
Code
28a2dfe801
systemd/test/fuzz/fuzz-unit-file/directives.service

922 lines
14 KiB
SYSTEMD
Raw Normal View History

fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
service
Accept=
AccuracySec=
After=
Alias=
AllowIsolate=
Also=
AmbientCapabilities=
AssertACPower=
AssertArchitecture=
AssertCapability=
AssertControlGroupController=
AssertDirectoryNotEmpty=
AssertFileIsExecutable=
AssertFileNotEmpty=
AssertFirstBoot=
AssertGroup=
AssertHost=
AssertKernelCommandLine=
AssertKernelVersion=
AssertNeedsUpdate=
AssertPathExists=
AssertPathExistsGlob=
AssertPathIsDirectory=
AssertPathIsMountPoint=
AssertPathIsReadWrite=
AssertPathIsSymbolicLink=
AssertSecurity=
AssertUser=
AssertVirtualization=
Backlog=
Before=
BindIPv6Only=
BindPaths=
BindReadOnlyPaths=
BindToDevice=
BindsTo=
BlockIOAccounting=
BlockIODeviceWeight=
BlockIOReadBandwidth=
BlockIOWeight=
BlockIOWriteBandwidth=
Broadcast=
BusName=
CPUAccounting=
CPUQuota=
CPUShares=
CPUWeight=
CapabilityBoundingSet=
CollectMode=
ConditionACPower=
ConditionArchitecture=
ConditionCapability=
ConditionControlGroupController=
ConditionDirectoryNotEmpty=
ConditionFileIsExecutable=
ConditionFileNotEmpty=
ConditionFirstBoot=
ConditionGroup=
ConditionHost=
ConditionKernelCommandLine=
ConditionKernelVersion=
ConditionNeedsUpdate=
ConditionPathExists=
ConditionPathExistsGlob=
ConditionPathIsDirectory=
ConditionPathIsMountPoint=
ConditionPathIsReadWrite=
ConditionPathIsSymbolicLink=
ConditionSecurity=
ConditionUser=
ConditionVirtualization=
Conflicts=
DefaultDependencies=
DefaultInstance=
DeferAcceptSec=
Delegate=
Description=
DeviceAllow=
DevicePolicy=
DirectoryMode=
DirectoryNotEmpty=
Documentation=
DynamicUser=
ExecReload=
core: ExecCondition= for services Closes #10596
2019-06-29 03:02:30 +03:00
ExecCondition=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ExecStart=
ExecStartPost=
ExecStartPre=
ExecStop=
ExecStopPost=
ExecStopPre=
FailureAction=
FileDescriptorName=
FileDescriptorStoreMax=
ForceUnmount=
FreeBind=
Group=
GuessMainPID=
IOAccounting=
IODeviceWeight=
IOReadBandwidthMax=
IOReadIOPSMax=
IOWeight=
IOWriteBandwidthMax=
IOWriteIOPSMax=
IPAccounting=
IPAddressAllow=
IPAddressDeny=
IPTOS=
IPTTL=
IgnoreOnIsolate=
JobRunningTimeoutSec=
JobTimeoutAction=
JobTimeoutRebootArgument=
JobTimeoutSec=
JoinsNamespaceOf=
KeepAlive=
KeepAliveIntervalSec=
KeepAliveProbes=
KeepAliveTimeSec=
KillMode=
KillSignal=
LazyUnmount=
ListenDatagram=
ListenFIFO=
ListenMessageQueue=
fuzz-unit-file: simply do not test ListenNetlink= at all msan doesn't understand sscanf with %ms, so it falsely reports unitialized memory. Using sscanf with %ms is quite convenient in socket_address_parse_netlink(), so let's just not run the fuzzer for ListenNetlink= at all for now. If msan is fixed, we can remove this. https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6884
2018-03-18 15:39:38 +03:00
#ListenNetlink=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ListenSequentialPacket=
ListenSpecial=
ListenStream=
ListenUSBFunction=
MakeDirectory=
Mark=
MaxConnections=
MaxConnectionsPerSource=
MemoryAccounting=
MemoryHigh=
MemoryLimit=
MemoryLow=
MemoryMax=
MemorySwapMax=
MessageQueueMaxMessages=
MessageQueueMessageSize=
MountAPIVFS=
NoDelay=
NoNewPrivileges=
NonBlocking=
NotifyAccess=
OnActiveSec=
OnBootSec=
OnCalendar=
OnFailure=
OnFailureJobMode=
OnStartupSec=
OnUnitActiveSec=
OnUnitInactiveSec=
Options=
PAMName=
PIDFile=
PartOf=
PassCredentials=
PassSecurity=
PathChanged=
PathExists=
PathExistsGlob=
PathModified=
PermissionsStartOnly=
Persistent=
PipeSize=
Priority=
PropagatesReloadTo=
RandomizedDelaySec=
RebootArgument=
ReceiveBuffer=
RefuseManualStart=
RefuseManualStop=
ReloadPropagatedFrom=
RemainAfterElapse=
RemainAfterExit=
RemoveOnStop=
RequiredBy=
Requires=
RequiresMountsFor=
Requisite=
Restart=
RestartForceExitStatus=
RestartPreventExitStatus=
RestartSec=
ReusePort=
RootDirectory=
RootDirectoryStartOnly=
RootImage=
RuntimeMaxSec=
SELinuxContextFromNet=
SecureBits=
SendBuffer=
SendSIGHUP=
SendSIGKILL=
Service=
Slice=
SloppyOptions=
SmackLabel=
SmackLabelIPIn=
SmackLabelIPOut=
SocketGroup=
SocketMode=
SocketProtocol=
SocketUser=
Sockets=
SourcePath=
StartLimitAction=
StartLimitBurst=
StartLimitIntervalSec=
StartupBlockIOWeight=
StartupCPUShares=
StartupCPUWeight=
StartupIOWeight=
StopWhenUnneeded=
SuccessAction=
SuccessExitStatus=
SupplementaryGroups=
Symlinks=
TCPCongestion=
TasksAccounting=
TasksMax=
TimeoutIdleSec=
TimeoutSec=
TimeoutStartSec=
TimeoutStopSec=
service: handle abort stops with dedicated timeout When shooting down a service with SIGABRT the user might want to have a much longer stop timeout than on regular stops/shutdowns. Especially in the face of short stop timeouts the time might not be sufficient to write huge core dumps before the service is killed. This commit adds a dedicated (Default)TimeoutAbortSec= timer that is used when stopping a service via SIGABRT. In all other cases the existing TimeoutStopSec= is used. The timer value is unset by default to skip the special handling and use TimeoutStopSec= for state 'stop-watchdog' to keep the old behaviour. If the service is in state 'stop-watchdog' and the service should be stopped explicitly we still go to 'stop-sigterm' and re-apply the usual TimeoutStopSec= timeout.
2017-11-29 09:43:44 +03:00
TimeoutAbortSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
Transparent=
TriggerLimitBurst=
TriggerLimitIntervalSec=
Type=
USBFunctionDescriptors=
USBFunctionStrings=
Unit=
User=
WakeSystem=
WantedBy=
Wants=
WatchdogSec=
What=
Where=
WorkingDirectory=
Writable=
fsck.mode=
fsck.repair=
fstab=
locale.LANG=
locale.LANGUAGE=
locale.LC_ADDRESS=
locale.LC_COLLATE=
locale.LC_CTYPE=
locale.LC_IDENTIFICATION=
locale.LC_MEASUREMENT=
locale.LC_MESSAGES=
locale.LC_MONETARY=
locale.LC_NAME=
locale.LC_NUMERIC=
locale.LC_PAPER=
locale.LC_TELEPHONE=
locale.LC_TIME=
luks.crypttab=
luks.key=
luks.name=
luks.options=
luks.uuid=
luks=
modules_load=
mount.usr=
mount.usrflags=
mount.usrfstype=
net.ifnames=
plymouth.enable=
quotacheck.mode=
rd.fstab=
rd.luks.crypttab=
rd.luks.key=
rd.luks.name=
rd.luks.options=
rd.luks.uuid=
rd.luks=
rd.modules_load=
rd.systemd.gpt_auto=
rd.systemd.unit=
rd.systemd.verity=
rd.udev.children_max=
rd.udev.event_timeout=
rd.udev.exec_delay=
rd.udev.log_priority=
resume=
hibernate-resume: add resumeflags= kernel option Adds the resumeflags= kernel command line option to allow setting a custom device timeout for the resume device (defaults to the same as the root device).
2019-06-06 03:59:05 +03:00
resumeflags=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
root=
rootflags=
rootfstype=
roothash=
systemd.default_standard_error=
systemd.default_standard_output=
systemd.default_timeout_start_sec=
systemd.firstboot=
systemd.gpt_auto=
systemd.journald.forward_to_console=
systemd.journald.forward_to_kmsg=
systemd.journald.forward_to_syslog=
systemd.journald.forward_to_wall=
systemd.log_level=
systemd.log_location=
systemd.log_target=
systemd.machine_id=
systemd.mask=
systemd.restore_state=
systemd.service_watchdogs=
systemd.setenv=
systemd.unit=
systemd.verity=
systemd.verity_root_data=
systemd.verity_root_hash=
systemd.volatile=
systemd.wants=
systemd.watchdog_device=
udev.children_max=
udev.event_timeout=
udev.exec_delay=
udev.log_priority=
vconsole.font=
vconsole.font_map=
vconsole.font_unimap=
vconsole.keymap=
vconsole.keymap_toggle=
ID_MODEL=
ID_MODEL_FROM_DATABASE=
SYSTEMD_ALIAS=
SYSTEMD_MOUNT_OPTIONS=
SYSTEMD_MOUNT_WHERE=
SYSTEMD_READY=
SYSTEMD_USER_WANTS=
SYSTEMD_WANTS=
link_priority=
static_node=
string_escape=
ARP=
ARPAllTargets=
ARPIPTargets=
ARPIntervalSec=
ARPValidate=
ActiveSlave=
AdSelect=
Address=
AddressAutoconfiguration=
AgeingTimeSec=
Alias=
AllSlavesActive=
AllowLocalRemote=
AllowPortToBeRoot=
AllowedIPs=
Anonymize=
Architecture=
AutoJoin=
AutoNegotiation=
BindCarrier=
BitsPerSecond=
Bond=
Bridge=
Broadcast=
Cache=
ClientIdentifier=
ConfigureWithoutCarrier=
CopyDSCP=
Cost=
CriticalConnection=
DHCP=
DHCPServer=
DNS=
DNSLifetimeSec=
DNSSEC=
DNSSECNegativeTrustAnchors=
DNSStubListener=
DUIDRawData=
DUIDType=
DefaultLeaseTimeSec=
DefaultPVID=
Description=
Destination=
DestinationPort=
DiscoverPathMTU=
Domains=
DownDelaySec=
Driver=
Duplex=
DuplicateAddressDetection=
EgressUntagged=
EmitDNS=
EmitDomains=
EmitLLDP=
EmitNTP=
EmitRouter=
EmitTimezone=
EncapsulationLimit=
Endpoint=
FDBAgeingSec=
FailOverMACPolicy=
FallbackDNS=
FallbackNTP=
FastLeave=
FirewallMark=
Flags=
FlowLabel=
ForwardDelaySec=
From=
FwMark=
GVRP=
Gateway=
network: rename GatewayOnlink= to GatewayOnLink= But still GatewayOnlink= is supported for backward compatibility.
2019-02-27 11:43:08 +03:00
GatewayOnLink=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
GenericReceiveOffload=
GenericSegmentationOffload=
GratuitousARP=
Group=
GroupForwardMask=
GroupPolicyExtension=
HairPin=
networkd: bridge add support to configure multicast_to_unicast closes #10649
2018-12-03 13:47:36 +03:00
MulticastToUnicast=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
HelloTimeSec=
HomeAddress=
Host=
Hostname=
IAID=
IPForward=
IPMasquerade=
IPv4LLRoute=
IPv4ProxyARP=
IPv6AcceptRA=
IPv6DuplicateAddressDetection=
IPv6FlowLabel=
IPv6HopLimit=
IPv6Preference=
IPv6PrefixDelegation=
IPv6PrivacyExtensions=
IPv6ProxyNDP=
IPv6ProxyNDPAddress=
IPv6Token=
Id=
IncomingInterface=
Independent=
InitialAdvertisedReceiveWindow=
InitialCongestionWindow=
InputKey=
networkd: RPDB rule - add support to configure inverted rule. Closes #10706
2018-12-03 15:55:30 +03:00
InvertRule=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
KernelCommandLine=
KernelVersion=
Key=
Kind=
L2MissNotification=
L3MissNotification=
LACPTransmitRate=
LLDP=
LLMNR=
Label=
LargeReceiveOffload=
LearnPacketIntervalSec=
LinkLocalAddressing=
ListenPort=
Local=
LooseBinding=
MACAddress=
MACAddressPolicy=
MACVLAN=
MIIMonitorSec=
MTUBytes=
MVRP=
MacLearning=
ManageTemporaryAddress=
Managed=
MaxAgeSec=
MaxLeaseTimeSec=
MaximumFDBEntries=
Metric=
MinLinks=
Mode=
MultiQueue=
MulticastDNS=
MulticastQuerier=
MulticastSnooping=
NTP=
Name=
NamePolicy=
OnLink=
OneQueue=
OriginalName=
OtherInformation=
OutgoingInterface=
OutputKey=
PVID=
PacketInfo=
PacketsPerSlave=
Path=
Peer=
PersistentKeepalive=
PollIntervalMaxSec=
PollIntervalMinSec=
PoolOffset=
PoolSize=
Port=
PortRange=
PreferredLifetime=
PreferredLifetimeSec=
PreferredSource=
Prefix=
PrefixRoute=
PresharedKey=
PrimaryReselectPolicy=
PrimarySlave=
Priority=
PrivateKey=
Protocol=
PublicKey=
QuickAck=
RapidCommit=
ReduceARPProxy=
Remote=
RemoteChecksumRx=
RemoteChecksumTx=
ReorderHeader=
RequestBroadcast=
RequiredForOnline=
ResendIGMP=
RootDistanceMaxSec=
RouteMetric=
RouteShortCircuit=
RouteTable=
RouterLifetimeSec=
RouterPreference=
STP=
Scope=
SendHostname=
Source=
TCP6SegmentationOffload=
TCPSegmentationOffload=
TOS=
TTL=
Table=
Timezone=
To=
TransmitHashPolicy=
Tunnel=
TxtData=
TxtText=
Type=
TypeOfService=
UDP6ZeroChecksumRx=
UDP6ZeroChecksumTx=
UDPChecksum=
UDPSegmentationOffload=
UnicastFlood=
Unmanaged=
UpDelaySec=
UseBPDU=
UseDNS=
UseDomains=
UseHostname=
UseMTU=
UseNTP=
UseRoutes=
UseTimezone=
User=
VLAN=
VLANFiltering=
VLANId=
VNetHeader=
VRF=
VXLAN=
ValidLifetimeSec=
VendorClassIdentifier=
Virtualization=
WakeOnLan=
Weight=
CODE_FILE=
CODE_FUNC=
CODE_LINE=
COREDUMP_UNIT=
COREDUMP_USER_UNIT=
ERRNO=
MESSAGE=
MESSAGE_ID=
OBJECT_AUDIT_LOGINUID=
OBJECT_AUDIT_SESSION=
OBJECT_CMDLINE=
OBJECT_COMM=
OBJECT_EXE=
OBJECT_GID=
OBJECT_PID=
OBJECT_SYSTEMD_CGROUP=
OBJECT_SYSTEMD_OWNER_UID=
OBJECT_SYSTEMD_SESSION=
OBJECT_SYSTEMD_UNIT=
OBJECT_SYSTEMD_USER_UNIT=
OBJECT_UID=
PRIORITY=
SYSLOG_FACILITY=
SYSLOG_IDENTIFIER=
SYSLOG_PID=
_AUDIT_LOGINUID=
_AUDIT_SESSION=
_BOOT_ID=
_CAP_EFFECTIVE=
_CMDLINE=
_COMM=
_EXE=
_GID=
_HOSTNAME=
_KERNEL_DEVICE=
_KERNEL_SUBSYSTEM=
_LINE_BREAK=
_MACHINE_ID=
_PID=
_SELINUX_CONTEXT=
_SOURCE_REALTIME_TIMESTAMP=
_STREAM_ID=
_SYSTEMD_CGROUP=
_SYSTEMD_INVOCATION_ID=
_SYSTEMD_OWNER_UID=
_SYSTEMD_SESSION=
_SYSTEMD_SLICE=
_SYSTEMD_UNIT=
_SYSTEMD_USER_UNIT=
_TRANSPORT=
_UDEV_DEVLINK=
_UDEV_DEVNODE=
_UDEV_SYSNAME=
_UID=
__CURSOR=
__MONOTONIC_TIMESTAMP=
__REALTIME_TIMESTAMP=
class=
type=
cipher=
hash=
header=
key-slot=
keyfile-offset=
keyfile-size=
offset=
size=
skip=
tcrypt-keyfile=
timeout=
tries=
x-systemd.after=
x-systemd.before=
x-systemd.device-timeout=
x-systemd.idle-timeout=
x-systemd.mount-timeout=
x-systemd.requires-mounts-for=
x-systemd.requires=
CPUAffinity=
CapabilityBoundingSet=
CrashChangeVT=
CrashReboot=
CrashShell=
CtrlAltDelBurstAction=
DefaultBlockIOAccounting=
DefaultCPUAccounting=
DefaultEnvironment=
DefaultIPAccounting=
DefaultLimitAS=
DefaultLimitCORE=
DefaultLimitCPU=
DefaultLimitDATA=
DefaultLimitFSIZE=
DefaultLimitLOCKS=
DefaultLimitMEMLOCK=
DefaultLimitMSGQUEUE=
DefaultLimitNICE=
DefaultLimitNOFILE=
DefaultLimitNPROC=
DefaultLimitRSS=
DefaultLimitRTPRIO=
DefaultLimitRTTIME=
DefaultLimitSIGPENDING=
DefaultLimitSTACK=
DefaultMemoryAccounting=
DefaultRestartSec=
DefaultStandardError=
DefaultStandardOutput=
DefaultStartLimitBurst=
DefaultStartLimitIntervalSec=
DefaultTasksAccounting=
DefaultTasksMax=
DefaultTimeoutStartSec=
DefaultTimeoutStopSec=
service: handle abort stops with dedicated timeout When shooting down a service with SIGABRT the user might want to have a much longer stop timeout than on regular stops/shutdowns. Especially in the face of short stop timeouts the time might not be sufficient to write huge core dumps before the service is killed. This commit adds a dedicated (Default)TimeoutAbortSec= timer that is used when stopping a service via SIGABRT. In all other cases the existing TimeoutStopSec= is used. The timer value is unset by default to skip the special handling and use TimeoutStopSec= for state 'stop-watchdog' to keep the old behaviour. If the service is in state 'stop-watchdog' and the service should be stopped explicitly we still go to 'stop-sigterm' and re-apply the usual TimeoutStopSec= timeout.
2017-11-29 09:43:44 +03:00
DefaultTimeoutAbortSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
DefaultTimerAccuracySec=
DumpCore=
HibernateMode=
HibernateState=
HybridSleepMode=
HybridSleepState=
LogColor=
LogLevel=
LogLocation=
LogTarget=
RuntimeWatchdogSec=
ShowStatus=
core: rename ShutdownWatchdogSec to RebootWatchdogSec This option is only used on reboot, not on other types of shutdown modes, so it is misleading. Keep the old name working for backward compatibility, but remove it from the documentation.
2019-07-22 13:39:25 +03:00
RebootWatchdogSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ShutdownWatchdogSec=
core: add KExecWatchdogSec option Rather than always enabling the shutdown WD on kexec, which might be dangerous in case the kernel driver and/or the hardware implementation does not reset the wd on kexec, add a new timer, disabled by default, to let users optionally enable the shutdown WD on kexec separately from the runtime and reboot ones. Advise in the documentation to also use the runtime WD in conjunction with it. Fixes: a637d0f9ecbe ("core: set shutdown watchdog on kexec too")
2019-07-19 13:54:15 +03:00
KExecWatchdogSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
SuspendMode=
SuspendState=
SystemCallArchitectures=
TimerSlackNSec=
WatchdogDevice=
-N=
-c=
-e=
-t=
ANSI_COLOR=
AppArmorProfile=
BUG_REPORT_URL=
BUILD_ID=
Bind=
BindReadOnly=
Boot=
Bridge=
CHASSIS=
CPE_NAME=
CPUAffinity=
CPUSchedulingPolicy=
CPUSchedulingPriority=
CPUSchedulingResetOnFork=
CacheDirectory=
CacheDirectoryMode=
Capability=
Compress=
ConfigurationDirectory=
ConfigurationDirectoryMode=
DEPLOYMENT=
DropCapability=
Environment=
EnvironmentFile=
ExternalSizeMax=
FONT=
FONT_MAP=
FONT_UNIMAP=
ForwardToConsole=
ForwardToKMsg=
ForwardToSyslog=
ForwardToWall=
HOME_URL=
HandleHibernateKey=
HandleLidSwitch=
HandleLidSwitchDocked=
HandleLidSwitchExternalPower=
HandlePowerKey=
HandleSuspendKey=
HibernateKeyIgnoreInhibited=
HoldoffTimeoutSec=
ICON_NAME=
ID=
ID_LIKE=
IOSchedulingClass=
IOSchedulingPriority=
IPVLAN=
IdleAction=
IdleActionSec=
IgnoreSIGPIPE=
InaccessiblePaths=
InhibitDelayMaxSec=
InhibitorsMax=
Interface=
JournalSizeMax=
KEYMAP=
KEYMAP_TOGGLE=
KeepFree=
KeyringMode=
KillExcludeUsers=
KillOnlyUsers=
KillSignal=
Make Watchdog Signal Configurable Allows configuring the watchdog signal (with a default of SIGABRT). This allows an alternative to SIGABRT when coredumps are not desirable. Appropriate references to SIGABRT or aborting were renamed to reflect more liberal watchdog signals. Closes #8658
2018-09-19 22:03:01 +03:00
WatchdogSignal=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
KillUserProcesses=
LOCATION=
LidSwitchIgnoreInhibited=
LimitAS=
LimitCORE=
LimitCPU=
LimitDATA=
LimitFSIZE=
LimitLOCKS=
LimitMEMLOCK=
LimitMSGQUEUE=
LimitNICE=
LimitNOFILE=
LimitNPROC=
LimitRSS=
LimitRTPRIO=
LimitRTTIME=
LimitSIGPENDING=
LimitSTACK=
LineMax=
LockPersonality=
LogExtraFields=
LogLevelMax=
core: implement per unit journal rate limiting Add LogRateLimitIntervalSec= and LogRateLimitBurst= options for services. If provided, these values get passed to the journald client context, and those values are used in the rate limiting function in the journal over the the journald.conf values. Part of #10230
2018-10-08 06:28:36 +03:00
LogRateLimitIntervalSec=
LogRateLimitBurst=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
LogsDirectory=
LogsDirectoryMode=
MACVLAN=
MachineID=
MaxFileSec=
MaxLevelConsole=
MaxLevelKMsg=
MaxLevelStore=
MaxLevelSyslog=
MaxLevelWall=
MaxRetentionSec=
MaxUse=
MemoryDenyWriteExecute=
MountFlags=
NAME=
NAutoVTs=
Nice=
main: add NoNewPrivileges config option (#8475) This makes it possible to disable new privileges for the whole system.
2018-03-22 01:41:19 +03:00
NoNewPrivileges=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
NotifyReady=
OOMScoreAdjust=
Overlay=
OverlayReadOnly=
PRETTY_HOSTNAME=
PRETTY_NAME=
PRIVACY_POLICY_URL=
Parameters=
PassEnvironment=
Personality=
PivotRoot=
Port=
PowerKeyIgnoreInhibited=
Private=
PrivateDevices=
PrivateNetwork=
PrivateTmp=
PrivateUsers=
PrivateUsersChown=
ProcessSizeMax=
ProcessTwo=
ProtectControlGroups=
ProtectHome=
ProtectKernelModules=
ProtectKernelTunables=
ProtectSystem=
RateLimitBurst=
RateLimitIntervalSec=
ReadKMsg=
ReadOnly=
ReadOnlyPaths=
ReadWritePaths=
RemoveIPC=
ReserveVT=
RestrictAddressFamilies=
RestrictNamespaces=
RestrictRealtime=
core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID=
2019-03-20 21:09:09 +03:00
RestrictSUIDSGID=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
RuntimeDirectory=
RuntimeDirectoryMode=
RuntimeDirectoryPreserve=
RuntimeDirectorySize=
RuntimeKeepFree=
RuntimeMaxFileSize=
RuntimeMaxFiles=
RuntimeMaxUse=
SELinuxContext=
SUPPORT_URL=
Seal=
ServerCertificateFile=
ServerKeyFile=
SessionsMax=
SmackProcessLabel=
SplitMode=
StandardError=
StandardInput=
StandardInputData=
StandardInputText=
StandardOutput=
StateDirectory=
StateDirectoryMode=
Storage=
SuspendKeyIgnoreInhibited=
SyncIntervalSec=
SyslogFacility=
SyslogIdentifier=
SyslogLevel=
SyslogLevelPrefix=
SystemCallArchitectures=
SystemCallErrorNumber=
SystemCallFilter=
SystemKeepFree=
SystemMaxFileSize=
SystemMaxFiles=
SystemMaxUse=
TTYPath=
TTYReset=
TTYVHangup=
TTYVTDisallocate=
TemporaryFileSystem=
TimerSlackNSec=
TrustedCertificateFile=
UMask=
URL=
UnsetEnvironment=
User=
UserTasksMax=
UtmpIdentifier=
UtmpMode=
VARIANT=
VARIANT_ID=
VERSION=
VERSION_CODENAME=
VERSION_ID=
VirtualEthernet=
VirtualEthernetExtra=
Volatile=
WorkingDirectory=
Zone=
Copy Permalink