shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-10-30 23:21:22 +03:00
Code
The systemd System and Service Manager
32,543 Commits 4 Branches 390 Tags 548 MiB
C 88.9%
Python 5.3%
Shell 4.4%
Meson 1.2%
936f6bdb80
Go to file
Franck Bui 936f6bdb80 tmpfiles: don't resolve pathnames when traversing recursively through directory trees 
Otherwise we can be fooled if one path component is replaced underneath us.

The patch achieves that by always operating at file descriptor level (by using
*at() helpers) and by making sure we do not any path resolution when traversing
direcotry trees.

However this is not always possible, for instance when listing the content of a
directory or some operations don't provide the *at() helpers or others (such as
fchmodat()) don't have the AT_EMPTY_PATH flag. In such cases we operate on
/proc/self/fd/%i pseudo-symlink instead, which works the same for all kinds of
objects and requires no checking of type beforehand.

Also O_PATH flag is used when opening file objects in order to prevent
undesired behaviors: device nodes from reacting, automounts from
triggering, etc...

Fixes: #7986
Fixes: CVE-2018-6954
2018-03-05 19:00:11 +01:00
.github doc: add a new doc/ directory, and move two markdown docs into them 2018-02-27 19:59:09 +01:00
.mkosi mkosi: remove intltool from deps 2018-02-16 13:01:12 +01:00
catalog catalog: update french translation 2017-12-22 15:34:51 +01:00
coccinelle coccinelle: similar to reallocarray() let's also systematically use malloc_multiply() 2018-03-02 12:39:07 +01:00
doc doc: add a new doc/ directory, and move two markdown docs into them 2018-02-27 19:59:09 +01:00
docs Add license headers and SPDX identifiers to meson.build files 2017-11-19 19:08:15 +01:00
factory/etc factory: remove broken pam_limits 2014-07-30 15:21:54 +02:00
hwdb Add accel matrix for iOTA 360 (#8342) 2018-03-05 16:47:28 +01:00
man Merge pull request #8354 from keszybz/new-NEWS 2018-03-05 17:16:04 +01:00
modprobe.d Add SPDX license headers to various assorted files 2017-11-19 19:08:15 +01:00
network Add license headers and SPDX identifiers to meson.build files 2017-11-19 19:08:15 +01:00
po po: Updated Indonesian translation (#8348) 2018-03-04 21:15:21 +09:00
presets Hook up systemd-tmpfiles as user units 2017-12-06 10:19:35 +01:00
rules rules: skip btrfs check if devices are not ready in 64-btrfs.rules (#8304) 2018-02-28 10:36:06 +01:00
scripts fuzz: add DHCP server fuzzer 2018-01-19 21:48:14 -05:00
shell-completion shell-completion: add --global and unit-paths 2018-02-09 12:27:34 +01:00
src tmpfiles: don't resolve pathnames when traversing recursively through directory trees 2018-03-05 19:00:11 +01:00
sysctl.d coredump: accept hostname on command line (#8033) 2018-02-15 12:12:46 +01:00
sysusers.d sysusers: use NOBODY_USER_NAME 2017-12-07 17:12:13 +09:00
test test-execute: use CAP_CHOWN instead of CAP_NET_ADMIN 2018-03-05 00:02:22 +09:00
tmpfiles.d nologin: extend the /run/nologin descriptions a bit (#8244) 2018-02-22 14:21:30 +01:00
tools tools/hwdb-update: allow downloads to fail 2018-03-02 12:06:32 +01:00
travis-ci Integration of Travis CI and Coverity Scan Analysis (#7691) 2018-01-11 11:41:35 +01:00
units units: use SuccessAction=reboot where appropriate (#8335) 2018-03-02 15:41:36 +01:00
xorg login: avoid external process call 2018-01-12 18:02:57 +01:00
.dir-locals.el meson: also indent scripts with 8 spaces 2017-04-25 08:49:16 -04:00
.editorconfig editorconfig: add rule for meson.build files (#6671) 2017-08-28 16:37:23 +02:00
.gitattributes git: indicate that tabs are never OK in the systemd tree 2013-10-30 02:25:38 +01:00
.gitignore Add mkosi.output/ to .gitignore 2017-11-29 14:33:56 +01:00
.mailmap mailmap: one more person 2018-02-14 09:43:49 +01:00
.travis.yml Integration of Travis CI and Coverity Scan Analysis (#7691) 2018-01-11 11:41:35 +01:00
.vimrc vimrc: fix indentation logic for our docbook xml files 2016-04-29 12:23:34 +02:00
.ycm_extra_conf.py ycm: add doc string for all the functions in configuration file 2017-11-29 13:21:49 -07:00
configure build-sys: add basic support for ./configure && make && make install 2017-07-18 10:05:06 -04:00
LICENSE.GPL2 relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
LICENSE.LGPL2.1 licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
Makefile build-sys: Fix Makefile wrapper for install target (#6548) 2017-08-07 11:29:20 +02:00
meson_options.txt Merge pull request #8323 from xyproto/ok_color 2018-03-02 13:00:07 +01:00
meson.build Merge pull request #8323 from xyproto/ok_color 2018-03-02 13:00:07 +01:00
mkosi.build mkosi: use locale that supports UTF-8, detect one that is available (#8340) 2018-03-05 17:03:52 +01:00
mkosi.default mkosi: create .mkosi directory 2016-10-06 11:53:58 -04:00
NEWS NEWS: update for v238 2018-03-05 16:42:04 +01:00
README README: fix context for CONFIG_DEVPTS_MULTIPLE_INSTANCES 2018-01-17 18:04:27 +00:00
README.md doc: add a new doc/ directory, and move two markdown docs into them 2018-02-27 19:59:09 +01:00
TODO update TODO 2018-03-02 16:26:03 +01:00
zanata.xml po: add basic fedora.zanata.org configuration 2018-02-19 13:56:57 +01:00

README.md

systemd - System and Service Manager

Count of open issues over time Count of open pull requests over time Build Status
Coverity Scan Status
CII Best Practices

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements are provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the HACKING file for information how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.