4 Commits

Author	SHA1	Message	Date
Lennart Poettering	5d1e8cd3e0	units: enable MaxConnectionsPerSocket= for all our Accept=yes units ... Let's make sure that user's cannot DoS services for other users so easily, and enable MaxConnectionsPerSocket= by default for all of them. Note that this is mostly paranoia for systemd-pcrextend.socket and systemd-sysext.socket: the socket is only accessible to root anyway, hence the accounting shouldn#t change anything. But this is just a safety net, in preparation that we open up some functionality of these services sooner or later.	2024-02-12 11:57:24 +01:00
Lennart Poettering	a609b3eab7	unit: systemd-creds.socket is statically enabled, hence drop [Install] ... This is statically enabled, hence needs to [Install] section.	2024-01-24 01:31:13 +08:00
Lennart Poettering	caef0bc3dc	creds: open up access to clients via Polkit ... Use auth_admin_keep, so that users don't have to re-auth interactively again and again when encrypting/decrypting batches of credentials.	2024-01-03 11:53:52 +01:00
Lennart Poettering	644f19c75c	creds: add varlink API for encrypting/decrypting credentials	2023-12-21 19:19:12 +01:00