shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-01-06 17:18:12 +03:00
Code
The systemd System and Service Manager
61,930 Commits 4 Branches 398 Tags 557 MiB
C 89.2%
Python 5.3%
Shell 4.1%
Meson 1.2%
1615578f27
Go to file
Alberto Planas 1615578f27 creds-util: check for CAP_DAC_READ_SEARCH 
In make_credential_host_secret, the credential.secret file is generated
first as a temporary anonymous file that is later instantiated with
linkat(2).  This system call requires CAP_DAC_READ_SEARCH capability
when the flag AT_EMPTY_PATH is used.

This patch check if the capability is effective, and if not uses the
alternative codepath for creating named temporary files.

Non-root users can now create per-user credentials with:

  export SYSTEMD_CREDENTIAL_SECRET=$HOME/.config/systemd/credential.secret
  systemd-creds setup

Signed-off-by: Alberto Planas <aplanas@suse.com>
2023-01-16 13:31:17 +01:00
.clusterfuzzlite ci: unpin CFLite 2022-04-26 09:13:57 +00:00
.github ci: Fix PR labeling 2023-01-12 11:42:16 +01:00
.semaphore semaphore: remove the Semaphore repositories recursively 2022-11-08 01:11:44 +09:00
catalog man: reword "string is extended into PCR" 2023-01-11 17:13:05 +01:00
coccinelle tree-wide: use -EBADF for fd initialization 2022-12-19 15:00:57 +01:00
docs docs/man: remove reference to default vsock CID 2023-01-15 22:17:15 +00:00
factory meson: also allow setting GIT_VERSION via templates 2022-04-05 22:18:31 +02:00
hwdb.d hwdb: Add mount matrix for Linx 1020 2023-01-11 22:19:57 +09:00
LICENSES network: change license of examples to MIT-0 2022-10-26 08:39:34 +02:00
man man: udev_enumerate_new: fix typo 2023-01-16 18:27:15 +09:00
mkosi.conf.d mkosi: Drop i686 packages 2022-12-13 22:00:04 +09:00
modprobe.d meson: install the right README file in modprobe.d 2021-07-07 14:52:05 +02:00
network network: change license of examples to MIT-0 2022-10-26 08:39:34 +02:00
po po: Translated using Weblate (Portuguese) 2022-12-12 13:26:55 +09:00
presets journal: give the ability to enable/disable systemd-journald-audit.socket 2023-01-11 17:18:57 +01:00
rules.d udev: also create partition /dev/disk/by-diskseq/ symlinks 2022-12-23 12:42:37 +01:00
shell-completion shell-completion: systemctl: add --no-warn 2023-01-12 11:51:19 +09:00
src creds-util: check for CAP_DAC_READ_SEARCH 2023-01-16 13:31:17 +01:00
sysctl.d tree-wide: link to docs.kernel.org for kernel documentation 2022-07-04 19:56:53 +02:00
sysusers.d Use descriptive name for nobody 2022-05-27 22:09:24 +01:00
test test: support a non-default SysV directory 2023-01-14 09:50:43 +09:00
tmpfiles.d tmpfiles.d: do not fail if provision.conf fails 2022-11-04 15:42:16 +01:00
tools oss-fuzz: include generated corpora in the final zip file 2023-01-07 17:44:23 +01:00
units journal: give the ability to enable/disable systemd-journald-audit.socket 2023-01-11 17:18:57 +01:00
xorg xorg/50-systemd-user: add a full license header 2021-10-01 14:45:00 +02:00
.clang-format clang-format: Adjust style of pointers 2022-05-30 04:00:54 +09:00
.ctags editors: Prevent ctags from following symlinks 2019-02-15 11:01:20 -08:00
.dir-locals.el scripts: use 4 space indentation 2019-04-12 08:30:31 +02:00
.editorconfig docs: configure editorconfig for css and html 2022-05-17 21:13:17 +02:00
.gitattributes gitattributes: introduce and use "generated" attribute 2021-10-18 09:42:55 +02:00
.gitignore core/cgroup: CPUWeight/CPUShares support idle input 2022-08-11 14:25:58 +02:00
.mailmap mailmap: two more names 2021-03-30 13:17:58 +02:00
.packit.yml packit: drop/replace deprecated directives 2022-12-15 21:48:49 +09:00
.vimrc scripts: use 4 space indentation 2019-04-12 08:30:31 +02:00
.ycm_extra_conf.py ycm: add doc string for all the functions in configuration file 2017-11-29 13:21:49 -07:00
configure tools: shellcheck-ify tool scripts 2021-09-30 12:27:06 +02:00
LICENSE.GPL2 relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
LICENSE.LGPL2.1 licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
Makefile tree-wide: add spdx header on all scripts and helpers 2021-01-28 09:55:35 +01:00
meson_options.txt boot: Remove option TPM PCR compat option 2023-01-09 09:52:55 +01:00
meson.build meson: use 0|1 for SD_BOOT 2023-01-10 14:25:57 +01:00
mkosi.build mkosi: Make sure selftests bpftool is accessible from $PATH 2022-12-05 10:51:24 +01:00
mkosi.kernel.config mkosi: Enable CONFIG_ZBOOT 2022-12-13 21:27:15 +01:00
mkosi.postinst mkosi: drop spaces after shell redirection operator 2022-11-14 11:59:30 +01:00
NEWS optionally set socket priority on DHCPv4 raw socket 2023-01-12 13:26:47 +09:00
README ci: install pefile 2022-12-07 15:53:47 +01:00
README.md README.md: add a missing line break 2022-10-19 11:17:33 +02:00
TODO update TODO 2023-01-10 18:28:38 +01:00

README.md

Systemd

System and Service Manager

Semaphore CI 2.0 Build Status
Coverity Scan Status
OSS-Fuzz Status
CIFuzz
CII Best Practices
CentOS CI - CentOS 8
CentOS CI - Arch
CentOS CI - Arch (sanitizers)
CentOS CI - Rawhide (SELinux)
Fossies codespell report
Coverage Status
Packaging status
OpenSSF Scorecard

Details

Most documentation is available on systemd's web site.

Assorted, older, general information about systemd can be found in the systemd Wiki.

Information about build requirements is provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the Code Map for information about this repository's layout and content.

Please see the Hacking guide for information on how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.

Stable branches with backported patches are available in the stable repo.