shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-02 19:21:53 +03:00
Code
82a335db83
systemd/test/fuzz/fuzz-unit-file/directives.service

949 lines
14 KiB
SYSTEMD
Raw Normal View History

fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
service
Accept=
AccuracySec=
After=
Alias=
fuzz-unit-file: add new items to the corpus
2019-11-24 16:19:50 +03:00
AllowedCPUs=
AllowedMemoryNodes=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
AllowIsolate=
Also=
AmbientCapabilities=
AssertACPower=
AssertArchitecture=
AssertCapability=
AssertControlGroupController=
AssertDirectoryNotEmpty=
AssertFileIsExecutable=
AssertFileNotEmpty=
AssertFirstBoot=
AssertGroup=
AssertHost=
AssertKernelCommandLine=
AssertKernelVersion=
AssertNeedsUpdate=
AssertPathExists=
AssertPathExistsGlob=
AssertPathIsDirectory=
AssertPathIsMountPoint=
AssertPathIsReadWrite=
AssertPathIsSymbolicLink=
AssertSecurity=
AssertUser=
AssertVirtualization=
Backlog=
Before=
BindIPv6Only=
BindPaths=
BindReadOnlyPaths=
BindToDevice=
BindsTo=
BlockIOAccounting=
BlockIODeviceWeight=
BlockIOReadBandwidth=
BlockIOWeight=
BlockIOWriteBandwidth=
Broadcast=
BusName=
manager: add CoredumpFilter= setting Fixes #6685.
2020-04-04 17:43:25 +03:00
CoredumpFilter=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
CPUAccounting=
CPUQuota=
CPUShares=
CPUWeight=
CapabilityBoundingSet=
CollectMode=
ConditionACPower=
ConditionArchitecture=
ConditionCapability=
ConditionControlGroupController=
ConditionDirectoryNotEmpty=
ConditionFileIsExecutable=
ConditionFileNotEmpty=
ConditionFirstBoot=
ConditionGroup=
ConditionHost=
ConditionKernelCommandLine=
ConditionKernelVersion=
ConditionNeedsUpdate=
ConditionPathExists=
ConditionPathExistsGlob=
ConditionPathIsDirectory=
ConditionPathIsMountPoint=
ConditionPathIsReadWrite=
ConditionPathIsSymbolicLink=
ConditionSecurity=
ConditionUser=
ConditionVirtualization=
Conflicts=
DefaultDependencies=
DefaultInstance=
DeferAcceptSec=
Delegate=
Description=
DeviceAllow=
DevicePolicy=
DirectoryMode=
DirectoryNotEmpty=
Documentation=
DynamicUser=
New directives NoExecPaths= ExecPaths= Implement directives `NoExecPaths=` and `ExecPaths=` to control `MS_NOEXEC` mount flag for the file system tree. This can be used to implement file system W^X policies, and for example with allow-listing mode (NoExecPaths=/) a compromised service would not be able to execute a shell, if that was not explicitly allowed. Example: [Service] NoExecPaths=/ ExecPaths=/usr/bin/daemon /usr/lib64 /usr/lib Closes: #17942.
2021-01-16 14:49:32 +03:00
ExecPaths=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ExecReload=
core: ExecCondition= for services Closes #10596
2019-06-29 03:02:30 +03:00
ExecCondition=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ExecStart=
ExecStartPost=
ExecStartPre=
ExecStop=
ExecStopPost=
ExecStopPre=
FailureAction=
FileDescriptorName=
FileDescriptorStoreMax=
ForceUnmount=
FreeBind=
Group=
GuessMainPID=
IOAccounting=
IODeviceWeight=
IOReadBandwidthMax=
IOReadIOPSMax=
IOWeight=
IOWriteBandwidthMax=
IOWriteIOPSMax=
IPAccounting=
IPAddressAllow=
IPAddressDeny=
New directives PrivateIPC and IPCNamespacePath
2021-02-16 18:58:56 +03:00
IPCNamespacePath=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
IPTOS=
IPTTL=
IgnoreOnIsolate=
JobRunningTimeoutSec=
JobTimeoutAction=
JobTimeoutRebootArgument=
JobTimeoutSec=
JoinsNamespaceOf=
KeepAlive=
KeepAliveIntervalSec=
KeepAliveProbes=
KeepAliveTimeSec=
KillMode=
KillSignal=
LazyUnmount=
ListenDatagram=
ListenFIFO=
ListenMessageQueue=
fuzz-unit-file: simply do not test ListenNetlink= at all msan doesn't understand sscanf with %ms, so it falsely reports unitialized memory. Using sscanf with %ms is quite convenient in socket_address_parse_netlink(), so let's just not run the fuzzer for ListenNetlink= at all for now. If msan is fixed, we can remove this. https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6884
2018-03-18 15:39:38 +03:00
#ListenNetlink=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ListenSequentialPacket=
ListenSpecial=
ListenStream=
ListenUSBFunction=
MakeDirectory=
Mark=
MaxConnections=
MaxConnectionsPerSource=
oom: add unit file settings for oomd avoid/omit xattrs
2021-01-28 13:31:44 +03:00
ManagedOOMSwap=
ManagedOOMMemoryPressure=
ManagedOOMMemoryPressureLimitPercent=
ManagedOOMPreference=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
MemoryAccounting=
MemoryHigh=
MemoryLimit=
MemoryLow=
MemoryMax=
MemorySwapMax=
MessageQueueMaxMessages=
MessageQueueMessageSize=
MountAPIVFS=
fuzz: add NetworkNamespacePath= into directives.service
2021-02-16 15:58:03 +03:00
NetworkNamespacePath=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
NoDelay=
New directives NoExecPaths= ExecPaths= Implement directives `NoExecPaths=` and `ExecPaths=` to control `MS_NOEXEC` mount flag for the file system tree. This can be used to implement file system W^X policies, and for example with allow-listing mode (NoExecPaths=/) a compromised service would not be able to execute a shell, if that was not explicitly allowed. Example: [Service] NoExecPaths=/ ExecPaths=/usr/bin/daemon /usr/lib64 /usr/lib Closes: #17942.
2021-01-16 14:49:32 +03:00
NoExecPaths=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
NoNewPrivileges=
NonBlocking=
NotifyAccess=
OnActiveSec=
OnBootSec=
OnCalendar=
OnFailure=
OnFailureJobMode=
OnStartupSec=
OnUnitActiveSec=
OnUnitInactiveSec=
Options=
PAMName=
PIDFile=
PartOf=
PassCredentials=
PassSecurity=
core: add new PassPacketInfo= socket unit property
2020-05-27 20:36:56 +03:00
PassPacketInfo=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
PathChanged=
PathExists=
PathExistsGlob=
PathModified=
PermissionsStartOnly=
Persistent=
PipeSize=
Priority=
PropagatesReloadTo=
RandomizedDelaySec=
timer: add new feature FixedRandomDelay= FixedRandomDelay=yes will use `siphash24(sd_id128_get_machine() || MANAGER_IS_SYSTEM(m) || getuid() || u->id)`, where || is concatenation, instead of a random number to choose a value between 0 and RandomizedDelaySec= as the timer delay. This essentially sets up a fixed, but seemingly random, offset for each timer iteration rather than having a random offset recalculated each time it fires. Closes #10355 Co-author: Anita Zhang <the.anitazha@gmail.com>
2020-02-01 20:27:08 +03:00
FixedRandomDelay=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
RebootArgument=
ReceiveBuffer=
RefuseManualStart=
RefuseManualStop=
ReloadPropagatedFrom=
RemainAfterElapse=
RemainAfterExit=
RemoveOnStop=
RequiredBy=
Requires=
RequiresMountsFor=
Requisite=
Restart=
RestartForceExitStatus=
core: add support for RestartKillSignal= to override signal used for restart jobs v2: - if RestartKillSignal= is not specified, fall back to KillSignal=. This is necessary to preserve backwards compatibility (and keep KillSignal= generally useful).
2019-10-01 16:15:06 +03:00
RestartKillSignal=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
RestartPreventExitStatus=
RestartSec=
ReusePort=
RootDirectory=
RootDirectoryStartOnly=
RootImage=
core: add RootHash and RootVerity service parameters Allow to explicitly pass root hash (explicitly or as a file) and verity device/file as unit options. Take precedence over implicit checks.
2020-06-03 11:50:45 +03:00
RootHash=
core: add RootHashSignature service parameter Allow to explicitly pass root hash signature as a unit option. Takes precedence over implicit checks.
2020-06-08 16:02:55 +03:00
RootHashSignature=
core: add RootHash and RootVerity service parameters Allow to explicitly pass root hash (explicitly or as a file) and verity device/file as unit options. Take precedence over implicit checks.
2020-06-03 11:50:45 +03:00
RootVerity=
Add ExtensionImages directive to form overlays Add support for overlaying images for services on top of their root fs, using a read-only overlay.
2021-02-22 15:20:33 +03:00
ExtensionImages=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
RuntimeMaxSec=
SELinuxContextFromNet=
SecureBits=
SendBuffer=
SendSIGHUP=
SendSIGKILL=
Service=
Slice=
SloppyOptions=
SmackLabel=
SmackLabelIPIn=
SmackLabelIPOut=
SocketGroup=
SocketMode=
SocketProtocol=
SocketUser=
Sockets=
SourcePath=
StartLimitAction=
StartLimitBurst=
StartLimitIntervalSec=
StartupBlockIOWeight=
StartupCPUShares=
StartupCPUWeight=
StartupIOWeight=
StopWhenUnneeded=
SuccessAction=
SuccessExitStatus=
SupplementaryGroups=
Symlinks=
TCPCongestion=
TasksAccounting=
TasksMax=
TimeoutIdleSec=
TimeoutSec=
TimeoutStartSec=
TimeoutStopSec=
service: handle abort stops with dedicated timeout When shooting down a service with SIGABRT the user might want to have a much longer stop timeout than on regular stops/shutdowns. Especially in the face of short stop timeouts the time might not be sufficient to write huge core dumps before the service is killed. This commit adds a dedicated (Default)TimeoutAbortSec= timer that is used when stopping a service via SIGABRT. In all other cases the existing TimeoutStopSec= is used. The timer value is unset by default to skip the special handling and use TimeoutStopSec= for state 'stop-watchdog' to keep the old behaviour. If the service is in state 'stop-watchdog' and the service should be stopped explicitly we still go to 'stop-sigterm' and re-apply the usual TimeoutStopSec= timeout.
2017-11-29 09:43:44 +03:00
TimeoutAbortSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
Transparent=
TriggerLimitBurst=
TriggerLimitIntervalSec=
Type=
USBFunctionDescriptors=
USBFunctionStrings=
Unit=
User=
WakeSystem=
WantedBy=
Wants=
WatchdogSec=
What=
Where=
WorkingDirectory=
Writable=
fsck.mode=
fsck.repair=
fstab=
locale.LANG=
locale.LANGUAGE=
locale.LC_ADDRESS=
locale.LC_COLLATE=
locale.LC_CTYPE=
locale.LC_IDENTIFICATION=
locale.LC_MEASUREMENT=
locale.LC_MESSAGES=
locale.LC_MONETARY=
locale.LC_NAME=
locale.LC_NUMERIC=
locale.LC_PAPER=
locale.LC_TELEPHONE=
locale.LC_TIME=
luks.crypttab=
luks.key=
luks.name=
luks.options=
luks.uuid=
luks=
modules_load=
mount.usr=
mount.usrflags=
mount.usrfstype=
net.ifnames=
plymouth.enable=
quotacheck.mode=
rd.fstab=
rd.luks.crypttab=
rd.luks.key=
rd.luks.name=
rd.luks.options=
rd.luks.uuid=
rd.luks=
rd.modules_load=
rd.systemd.gpt_auto=
rd.systemd.unit=
rd.systemd.verity=
rd.udev.children_max=
rd.udev.event_timeout=
rd.udev.exec_delay=
udev: rename kernel option 'log_priority' into 'log_level' Let's be consistent with the rest of the project. 'log_priority' is still supported for backward compatibility.
2020-09-21 12:10:50 +03:00
rd.udev.log_level=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
resume=
hibernate-resume: add resumeflags= kernel option Adds the resumeflags= kernel command line option to allow setting a custom device timeout for the resume device (defaults to the same as the root device).
2019-06-06 03:59:05 +03:00
resumeflags=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
root=
rootflags=
rootfstype=
roothash=
systemd.default_standard_error=
systemd.default_standard_output=
systemd.default_timeout_start_sec=
systemd.firstboot=
systemd.gpt_auto=
systemd.journald.forward_to_console=
systemd.journald.forward_to_kmsg=
systemd.journald.forward_to_syslog=
systemd.journald.forward_to_wall=
systemd.log_level=
systemd.log_location=
systemd.log_target=
systemd.machine_id=
systemd.mask=
systemd.restore_state=
systemd.service_watchdogs=
systemd.setenv=
systemd.unit=
systemd.verity=
systemd.verity_root_data=
systemd.verity_root_hash=
veritysetup-generator: add support for verity root options This adds support for a new kernel root verity command line option "verity_root_options=" which controls the behaviour of dm-verity by forwarding options directly to systemd-veritysetup. See `veritysetup(8)` for more details.
2020-11-13 14:00:25 +03:00
systemd.verity_root_options=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
systemd.volatile=
systemd.wants=
systemd.watchdog_device=
udev.children_max=
udev.event_timeout=
udev.exec_delay=
udev: rename kernel option 'log_priority' into 'log_level' Let's be consistent with the rest of the project. 'log_priority' is still supported for backward compatibility.
2020-09-21 12:10:50 +03:00
udev.log_level=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
vconsole.font=
vconsole.font_map=
vconsole.font_unimap=
vconsole.keymap=
vconsole.keymap_toggle=
ID_MODEL=
ID_MODEL_FROM_DATABASE=
SYSTEMD_ALIAS=
SYSTEMD_MOUNT_OPTIONS=
SYSTEMD_MOUNT_WHERE=
SYSTEMD_READY=
SYSTEMD_USER_WANTS=
SYSTEMD_WANTS=
link_priority=
static_node=
string_escape=
ARP=
ARPAllTargets=
ARPIPTargets=
ARPIntervalSec=
ARPValidate=
ActiveSlave=
AdSelect=
Address=
AddressAutoconfiguration=
AgeingTimeSec=
Alias=
AllSlavesActive=
AllowLocalRemote=
AllowPortToBeRoot=
AllowedIPs=
Anonymize=
Architecture=
AutoJoin=
AutoNegotiation=
BindCarrier=
BitsPerSecond=
Bond=
Bridge=
Broadcast=
Cache=
resolved: allow cache responses from local DNS servers
2020-11-24 16:44:07 +03:00
CacheFromLocalhost=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ClientIdentifier=
ConfigureWithoutCarrier=
CopyDSCP=
Cost=
CriticalConnection=
DHCP=
DHCPServer=
DNS=
DNSLifetimeSec=
DNSSEC=
DNSSECNegativeTrustAnchors=
DNSStubListener=
resolve: allow configurable bind address
2020-08-29 10:12:10 +03:00
DNSStubListenerExtra=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
DUIDRawData=
DUIDType=
DefaultLeaseTimeSec=
DefaultPVID=
Description=
Destination=
DestinationPort=
DiscoverPathMTU=
Domains=
DownDelaySec=
Driver=
Duplex=
DuplicateAddressDetection=
EgressUntagged=
EmitDNS=
EmitDomains=
EmitLLDP=
EmitNTP=
EmitRouter=
EmitTimezone=
EncapsulationLimit=
Endpoint=
FDBAgeingSec=
FailOverMACPolicy=
FallbackDNS=
FallbackNTP=
FastLeave=
FirewallMark=
Flags=
FlowLabel=
ForwardDelaySec=
From=
FwMark=
GVRP=
Gateway=
network: rename GatewayOnlink= to GatewayOnLink= But still GatewayOnlink= is supported for backward compatibility.
2019-02-27 11:43:08 +03:00
GatewayOnLink=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
GenericReceiveOffload=
GenericSegmentationOffload=
GratuitousARP=
Group=
GroupForwardMask=
GroupPolicyExtension=
HairPin=
networkd: bridge add support to configure multicast_to_unicast closes #10649
2018-12-03 13:47:36 +03:00
MulticastToUnicast=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
HelloTimeSec=
HomeAddress=
Host=
Hostname=
IAID=
IPForward=
IPMasquerade=
IPv4LLRoute=
IPv4ProxyARP=
IPv6AcceptRA=
IPv6DuplicateAddressDetection=
IPv6FlowLabel=
IPv6HopLimit=
IPv6Preference=
IPv6PrefixDelegation=
IPv6PrivacyExtensions=
IPv6ProxyNDP=
IPv6ProxyNDPAddress=
IPv6Token=
Id=
IncomingInterface=
Independent=
InitialAdvertisedReceiveWindow=
InitialCongestionWindow=
InputKey=
networkd: RPDB rule - add support to configure inverted rule. Closes #10706
2018-12-03 15:55:30 +03:00
InvertRule=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
KernelCommandLine=
KernelVersion=
Key=
Kind=
L2MissNotification=
L3MissNotification=
LACPTransmitRate=
LLDP=
LLMNR=
Label=
LargeReceiveOffload=
LearnPacketIntervalSec=
LinkLocalAddressing=
ListenPort=
Local=
LooseBinding=
MACAddress=
MACAddressPolicy=
MACVLAN=
MIIMonitorSec=
MTUBytes=
MVRP=
MacLearning=
ManageTemporaryAddress=
Managed=
MaxAgeSec=
MaxLeaseTimeSec=
MaximumFDBEntries=
Metric=
MinLinks=
Mode=
MultiQueue=
MulticastDNS=
MulticastQuerier=
MulticastSnooping=
NTP=
Name=
NamePolicy=
OnLink=
OneQueue=
OriginalName=
OtherInformation=
OutgoingInterface=
OutputKey=
PVID=
PacketInfo=
PacketsPerSlave=
Path=
Peer=
PersistentKeepalive=
PollIntervalMaxSec=
PollIntervalMinSec=
PoolOffset=
PoolSize=
Port=
PortRange=
PreferredLifetime=
PreferredLifetimeSec=
PreferredSource=
Prefix=
PrefixRoute=
PresharedKey=
PrimaryReselectPolicy=
PrimarySlave=
Priority=
PrivateKey=
Protocol=
PublicKey=
QuickAck=
RapidCommit=
ReduceARPProxy=
Remote=
RemoteChecksumRx=
RemoteChecksumTx=
ReorderHeader=
RequestBroadcast=
RequiredForOnline=
ResendIGMP=
RootDistanceMaxSec=
RouteMetric=
RouteShortCircuit=
RouteTable=
RouterLifetimeSec=
RouterPreference=
STP=
Scope=
SendHostname=
Source=
network: add SuppressPrefixLength option to RoutingPolicyRule (#14736) Closes #14724.
2020-02-03 02:25:48 +03:00
SuppressPrefixLength=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
TCP6SegmentationOffload=
TCPSegmentationOffload=
TOS=
TTL=
Table=
Timezone=
To=
TransmitHashPolicy=
Tunnel=
TxtData=
TxtText=
Type=
TypeOfService=
UDP6ZeroChecksumRx=
UDP6ZeroChecksumTx=
UDPChecksum=
UDPSegmentationOffload=
UnicastFlood=
Unmanaged=
UpDelaySec=
UseBPDU=
UseDNS=
UseDomains=
UseHostname=
UseMTU=
UseNTP=
UseRoutes=
UseTimezone=
User=
VLAN=
VLANFiltering=
VLANId=
VNetHeader=
VRF=
VXLAN=
ValidLifetimeSec=
VendorClassIdentifier=
Virtualization=
WakeOnLan=
Weight=
CODE_FILE=
CODE_FUNC=
CODE_LINE=
COREDUMP_UNIT=
COREDUMP_USER_UNIT=
ERRNO=
MESSAGE=
MESSAGE_ID=
OBJECT_AUDIT_LOGINUID=
OBJECT_AUDIT_SESSION=
OBJECT_CMDLINE=
OBJECT_COMM=
OBJECT_EXE=
OBJECT_GID=
OBJECT_PID=
OBJECT_SYSTEMD_CGROUP=
OBJECT_SYSTEMD_OWNER_UID=
OBJECT_SYSTEMD_SESSION=
OBJECT_SYSTEMD_UNIT=
OBJECT_SYSTEMD_USER_UNIT=
OBJECT_UID=
PRIORITY=
SYSLOG_FACILITY=
SYSLOG_IDENTIFIER=
SYSLOG_PID=
_AUDIT_LOGINUID=
_AUDIT_SESSION=
_BOOT_ID=
_CAP_EFFECTIVE=
_CMDLINE=
_COMM=
_EXE=
_GID=
_HOSTNAME=
_KERNEL_DEVICE=
_KERNEL_SUBSYSTEM=
_LINE_BREAK=
_MACHINE_ID=
_PID=
_SELINUX_CONTEXT=
_SOURCE_REALTIME_TIMESTAMP=
_STREAM_ID=
_SYSTEMD_CGROUP=
_SYSTEMD_INVOCATION_ID=
_SYSTEMD_OWNER_UID=
_SYSTEMD_SESSION=
_SYSTEMD_SLICE=
_SYSTEMD_UNIT=
_SYSTEMD_USER_UNIT=
_TRANSPORT=
_UDEV_DEVLINK=
_UDEV_DEVNODE=
_UDEV_SYSNAME=
_UID=
__CURSOR=
__MONOTONIC_TIMESTAMP=
__REALTIME_TIMESTAMP=
class=
type=
cipher=
hash=
header=
key-slot=
keyfile-offset=
keyfile-size=
offset=
size=
skip=
tcrypt-keyfile=
timeout=
tries=
x-systemd.after=
x-systemd.before=
x-systemd.device-timeout=
x-systemd.idle-timeout=
x-systemd.mount-timeout=
x-systemd.requires-mounts-for=
x-systemd.requires=
CPUAffinity=
CapabilityBoundingSet=
CrashChangeVT=
CrashReboot=
CrashShell=
CtrlAltDelBurstAction=
DefaultBlockIOAccounting=
DefaultCPUAccounting=
DefaultEnvironment=
DefaultIPAccounting=
DefaultLimitAS=
DefaultLimitCORE=
DefaultLimitCPU=
DefaultLimitDATA=
DefaultLimitFSIZE=
DefaultLimitLOCKS=
DefaultLimitMEMLOCK=
DefaultLimitMSGQUEUE=
DefaultLimitNICE=
DefaultLimitNOFILE=
DefaultLimitNPROC=
DefaultLimitRSS=
DefaultLimitRTPRIO=
DefaultLimitRTTIME=
DefaultLimitSIGPENDING=
DefaultLimitSTACK=
DefaultMemoryAccounting=
DefaultRestartSec=
DefaultStandardError=
DefaultStandardOutput=
DefaultStartLimitBurst=
DefaultStartLimitIntervalSec=
DefaultTasksAccounting=
DefaultTasksMax=
DefaultTimeoutStartSec=
DefaultTimeoutStopSec=
service: handle abort stops with dedicated timeout When shooting down a service with SIGABRT the user might want to have a much longer stop timeout than on regular stops/shutdowns. Especially in the face of short stop timeouts the time might not be sufficient to write huge core dumps before the service is killed. This commit adds a dedicated (Default)TimeoutAbortSec= timer that is used when stopping a service via SIGABRT. In all other cases the existing TimeoutStopSec= is used. The timer value is unset by default to skip the special handling and use TimeoutStopSec= for state 'stop-watchdog' to keep the old behaviour. If the service is in state 'stop-watchdog' and the service should be stopped explicitly we still go to 'stop-sigterm' and re-apply the usual TimeoutStopSec= timeout.
2017-11-29 09:43:44 +03:00
DefaultTimeoutAbortSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
DefaultTimerAccuracySec=
DumpCore=
HibernateMode=
HibernateState=
HybridSleepMode=
HybridSleepState=
LogColor=
LogLevel=
LogLocation=
LogTarget=
RuntimeWatchdogSec=
ShowStatus=
core: rename ShutdownWatchdogSec to RebootWatchdogSec This option is only used on reboot, not on other types of shutdown modes, so it is misleading. Keep the old name working for backward compatibility, but remove it from the documentation.
2019-07-22 13:39:25 +03:00
RebootWatchdogSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ShutdownWatchdogSec=
core: add KExecWatchdogSec option Rather than always enabling the shutdown WD on kexec, which might be dangerous in case the kernel driver and/or the hardware implementation does not reset the wd on kexec, add a new timer, disabled by default, to let users optionally enable the shutdown WD on kexec separately from the runtime and reboot ones. Advise in the documentation to also use the runtime WD in conjunction with it. Fixes: a637d0f9ecbe ("core: set shutdown watchdog on kexec too")
2019-07-19 13:54:15 +03:00
KExecWatchdogSec=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
SuspendMode=
SuspendState=
SystemCallArchitectures=
TimerSlackNSec=
WatchdogDevice=
-N=
-c=
-e=
-t=
ANSI_COLOR=
AppArmorProfile=
BUG_REPORT_URL=
BUILD_ID=
Bind=
BindReadOnly=
Boot=
Bridge=
CHASSIS=
CPE_NAME=
CPUAffinity=
CPUSchedulingPolicy=
CPUSchedulingPriority=
CPUSchedulingResetOnFork=
CacheDirectory=
CacheDirectoryMode=
Capability=
Compress=
ConfigurationDirectory=
ConfigurationDirectoryMode=
DEPLOYMENT=
DropCapability=
Environment=
EnvironmentFile=
ExternalSizeMax=
FONT=
FONT_MAP=
FONT_UNIMAP=
ForwardToConsole=
ForwardToKMsg=
ForwardToSyslog=
ForwardToWall=
HOME_URL=
HandleHibernateKey=
HandleLidSwitch=
HandleLidSwitchDocked=
HandleLidSwitchExternalPower=
HandlePowerKey=
HandleSuspendKey=
HibernateKeyIgnoreInhibited=
HoldoffTimeoutSec=
ICON_NAME=
ID=
ID_LIKE=
IOSchedulingClass=
IOSchedulingPriority=
IPVLAN=
IdleAction=
IdleActionSec=
IgnoreSIGPIPE=
InaccessiblePaths=
InhibitDelayMaxSec=
InhibitorsMax=
Interface=
JournalSizeMax=
KEYMAP=
KEYMAP_TOGGLE=
KeepFree=
KeyringMode=
core: introduce ProtectProc= and ProcSubset= to expose hidepid= and subset= procfs mount options Kernel 5.8 gained a hidepid= implementation that is truly per procfs, which allows us to mount a distinct once into every unit, with individual hidepid= settings. Let's expose this via two new settings: ProtectProc= (wrapping hidpid=) and ProcSubset= (wrapping subset=). Replaces: #11670
2020-08-06 13:51:50 +03:00
ProtectProc=
ProcSubset=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
KillExcludeUsers=
KillOnlyUsers=
KillSignal=
Make Watchdog Signal Configurable Allows configuring the watchdog signal (with a default of SIGABRT). This allows an alternative to SIGABRT when coredumps are not desirable. Appropriate references to SIGABRT or aborting were renamed to reflect more liberal watchdog signals. Closes #8658
2018-09-19 22:03:01 +03:00
WatchdogSignal=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
KillUserProcesses=
LOCATION=
LidSwitchIgnoreInhibited=
LimitAS=
LimitCORE=
LimitCPU=
LimitDATA=
LimitFSIZE=
LimitLOCKS=
LimitMEMLOCK=
LimitMSGQUEUE=
LimitNICE=
LimitNOFILE=
LimitNPROC=
LimitRSS=
LimitRTPRIO=
LimitRTTIME=
LimitSIGPENDING=
LimitSTACK=
LineMax=
LockPersonality=
LogExtraFields=
LogLevelMax=
core: implement per unit journal rate limiting Add LogRateLimitIntervalSec= and LogRateLimitBurst= options for services. If provided, these values get passed to the journald client context, and those values are used in the rate limiting function in the journal over the the journald.conf values. Part of #10230
2018-10-08 06:28:36 +03:00
LogRateLimitIntervalSec=
LogRateLimitBurst=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
LogsDirectory=
LogsDirectoryMode=
MACVLAN=
MachineID=
MaxFileSec=
MaxLevelConsole=
MaxLevelKMsg=
MaxLevelStore=
MaxLevelSyslog=
MaxLevelWall=
MaxRetentionSec=
MaxUse=
MemoryDenyWriteExecute=
MountFlags=
NAME=
NAutoVTs=
Nice=
main: add NoNewPrivileges config option (#8475) This makes it possible to disable new privileges for the whole system.
2018-03-22 01:41:19 +03:00
NoNewPrivileges=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
NotifyReady=
OOMScoreAdjust=
Overlay=
OverlayReadOnly=
PRETTY_HOSTNAME=
PRETTY_NAME=
PRIVACY_POLICY_URL=
Parameters=
PassEnvironment=
Personality=
PivotRoot=
Port=
PowerKeyIgnoreInhibited=
Private=
New directives PrivateIPC and IPCNamespacePath
2021-02-16 18:58:56 +03:00
PrivateIPC=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
PrivateDevices=
PrivateNetwork=
PrivateTmp=
PrivateUsers=
PrivateUsersChown=
ProcessSizeMax=
ProcessTwo=
ProtectControlGroups=
ProtectHome=
ProtectKernelModules=
ProtectKernelTunables=
ProtectSystem=
RateLimitBurst=
RateLimitIntervalSec=
ReadKMsg=
ReadOnly=
ReadOnlyPaths=
mount: add ReadWriteOnly property to fail on read-only mounts Systems where a mount point is expected to be read-write needs a way to fail mount units that fallback as read-only. Add a property to allow setting the -w option when calling mount(8).
2020-05-01 11:20:17 +03:00
ReadWriteOnly=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
ReadWritePaths=
RemoveIPC=
ReserveVT=
RestrictAddressFamilies=
RestrictNamespaces=
RestrictRealtime=
core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID=
2019-03-20 21:09:09 +03:00
RestrictSUIDSGID=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
RuntimeDirectory=
login: limit nr_inodes for /run/user/$UID Limit number of inodes for tmpfs mounts on /run/user/$UID. Default is RuntimeDirectorySize= divided by 4096.
2020-05-23 17:00:41 +03:00
RuntimeDirectoryInodesMax=
fuzz-unit-file: add a dump of systemd.directives(7) as a corpus entry $ ( echo service; man systemd.directives|grep =|grep -v -e --|sed 's/ //g' ) >> test/fuzz-corpus/unit-file/directives.service
2018-03-11 14:36:19 +03:00
RuntimeDirectoryMode=
RuntimeDirectoryPreserve=
RuntimeDirectorySize=
RuntimeKeepFree=
RuntimeMaxFileSize=
RuntimeMaxFiles=
RuntimeMaxUse=
SELinuxContext=
SUPPORT_URL=
Seal=
ServerCertificateFile=
ServerKeyFile=
SessionsMax=
SmackProcessLabel=
SplitMode=
StandardError=
StandardInput=
StandardInputData=
StandardInputText=
StandardOutput=
StateDirectory=
StateDirectoryMode=
Storage=
SuspendKeyIgnoreInhibited=
SyncIntervalSec=
SyslogFacility=
SyslogIdentifier=
SyslogLevel=
SyslogLevelPrefix=
SystemCallArchitectures=
SystemCallErrorNumber=
SystemCallFilter=
SystemKeepFree=
SystemMaxFileSize=
SystemMaxFiles=
SystemMaxUse=
TTYPath=
TTYReset=
TTYVHangup=
TTYVTDisallocate=
TemporaryFileSystem=
TimerSlackNSec=
TrustedCertificateFile=
UMask=
URL=
UnsetEnvironment=
User=
UserTasksMax=
UtmpIdentifier=
UtmpMode=
VARIANT=
VARIANT_ID=
VERSION=
VERSION_CODENAME=
VERSION_ID=
VirtualEthernet=
VirtualEthernetExtra=
Volatile=
WorkingDirectory=
Zone=
Copy Permalink