shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2024-11-06 16:59:03 +03:00
Code
The systemd System and Service Manager
33,240 Commits 3 Branches 390 Tags 547 MiB
C 88.9%
Python 5.3%
Shell 4.4%
Meson 1.2%
d4b653c589
Go to file
Lennart Poettering d4b653c589 nspawn: lock down a few things in /proc by default 
This tightens security on /proc: a couple of files exposed there are now
made inaccessible. These files might potentially leak kernel internals
or expose non-virtualized concepts, hence lock them down by default.
Moreover, a couple of dirs in /proc that expose stuff also exposed in
/sys are now marked read-only, similar to how we handle /sys.

The list is taken from what docker/runc based container managers
generally apply, but slightly extended.
2018-05-03 17:45:42 +02:00
.github doc: add a new doc/ directory, and move two markdown docs into them 2018-02-27 19:59:09 +01:00
.mkosi mkosi: ensure the 'hostname' tool is available in the build environment 2018-04-19 11:30:18 +02:00
catalog tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
coccinelle util-lib: introduce new empty_or_root() helper (#8746) 2018-04-18 14:20:49 +02:00
doc doc: document nore carefully that tmpfs within the cgroupfs setup shouldn't confuse statfs() checks 2018-05-03 17:19:46 +02:00
factory/etc factory: remove broken pam_limits 2014-07-30 15:21:54 +02:00
hwdb hwdb: Add accelerometer orientation quirk for the Kazam Vision tablet (#8845) 2018-04-28 10:43:06 +02:00
man Merge pull request #8887 from poettering/file-hier-efi 2018-05-03 23:07:07 +09:00
modprobe.d Add SPDX license headers to various assorted files 2017-11-19 19:08:15 +01:00
network tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
po po: update Turkish translation (#8783) 2018-04-23 10:12:03 +02:00
presets tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
rules tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
shell-completion bash-completion: add completion for resolvectl 2018-04-19 03:26:54 +09:00
src nspawn: lock down a few things in /proc by default 2018-05-03 17:45:42 +02:00
sysctl.d tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
sysusers.d tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
test test: don't send image building output to /dev/null (#8886) 2018-05-03 16:47:42 +03:00
tmpfiles.d meson: install nspawn tmpfiles snippet only when machined is turned on 2018-04-17 19:51:43 +02:00
tools tree-wide: drop spurious newlines (#8764) 2018-04-19 12:13:23 +02:00
travis-ci Integration of Travis CI and Coverity Scan Analysis (#7691) 2018-01-11 11:41:35 +01:00
units unit: tighten sandboxing for logind 2018-04-27 18:11:29 +09:00
xorg login: avoid external process call 2018-01-12 18:02:57 +01:00
.dir-locals.el meson: also indent scripts with 8 spaces 2017-04-25 08:49:16 -04:00
.editorconfig editorconfig: add rule for meson.build files (#6671) 2017-08-28 16:37:23 +02:00
.gitattributes
.gitignore Add mkosi.output/ to .gitignore 2017-11-29 14:33:56 +01:00
.mailmap mailmap: one more person 2018-03-05 17:21:09 +01:00
.travis.yml Rename scripts/coverity.sh to tools/coverity.sh 2018-03-12 15:39:21 +01:00
.vimrc vimrc: fix indentation logic for our docbook xml files 2016-04-29 12:23:34 +02:00
.ycm_extra_conf.py ycm: add doc string for all the functions in configuration file 2017-11-29 13:21:49 -07:00
configure build-sys: add basic support for ./configure && make && make install 2017-07-18 10:05:06 -04:00
LICENSE.GPL2
LICENSE.LGPL2.1
Makefile build-sys: Fix Makefile wrapper for install target (#6548) 2017-08-07 11:29:20 +02:00
meson_options.txt tree-wide: drop license boilerplate 2018-04-06 18:58:55 +02:00
meson.build meson: drop 'name' argument in cc.has_argument() (#8878) 2018-05-02 10:05:51 +02:00
mkosi.build mkosi: drop dumping all test output to console again 2018-04-19 11:41:28 +02:00
mkosi.default mkosi: create .mkosi directory 2016-10-06 11:53:58 -04:00
NEWS NEWS: Warn about predictable network naming changes 2018-03-26 14:00:43 -04:00
README doc: update hosts nsswitch setting to which consistent to man pages 2018-05-01 15:18:10 +09:00
README.md README: mention systemd-stable 2018-03-26 15:28:03 +02:00
TODO update TODO 2018-05-03 15:13:42 +02:00
zanata.xml po: add basic fedora.zanata.org configuration 2018-02-19 13:56:57 +01:00

README.md

systemd - System and Service Manager

Count of open issues over time Count of open pull requests over time Build Status
Coverity Scan Status
CII Best Practices

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements are provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the HACKING file for information how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.

Stable branches with backported patches are available in the stable repo.