Rivoreo Source Code Repositories
src.rivoreo.one / systemd-stable / v239-26
commit11f5677752f9b78239214b3064e5a2c3712d71b1[log] [download]
authorLennart Poettering <lennart@poettering.net>Wed Mar 20 20:19:38 2019 +0100
committerThe Plumber <50238977+systemd-rhel-bot@users.noreply.github.com>Wed Feb 19 14:56:29 2020 +0100
tree011230085f5c6131a4e2b083a0034c1f7933c7c7
parentb0573f1a6f8022aed4954d5ca19cc037d25cd5e7 [diff]
core: imply NNP and SUID/SGID restriction for DynamicUser=yes service

Let's be safe, rather than sorry. This way DynamicUser=yes services can
neither take benefit of, nor create SUID/SGID binaries.

Given that DynamicUser= is a recent addition only we should be able to
get away with turning this on, even though this is strictly speaking a
binary compatibility breakage.

(cherry picked from commit bf65b7e0c9fc215897b676ab9a7c9d1c688143ba)
Resolves: #1687512
2 files changed
tree: 011230085f5c6131a4e2b083a0034c1f7933c7c7
  1. .dir-locals.el
  2. .editorconfig
  3. .gitattributes
  4. .github/
  5. .gitignore
  6. .lgtm.yml
  7. .lgtm/cpp-queries/
  8. .mailmap
  9. .mkosi/
  10. .travis.yml
  11. .vimrc
  12. .ycm_extra_conf.py
  13. LICENSE.GPL2
  14. LICENSE.LGPL2.1
  15. Makefile
  16. NEWS
  17. README
  18. README.md
  19. TODO
  20. catalog/
  21. ci/
  22. coccinelle/
  23. configure
  24. doc/
  25. factory/etc/
  26. hwdb/
  27. man/
  28. meson.build
  29. meson_options.txt
  30. mkosi.build
  31. mkosi.default ⇨ .mkosi/mkosi.fedora
  32. modprobe.d/
  33. network/
  34. po/
  35. presets/
  36. rules/
  37. shell-completion/
  38. src/
  39. sysctl.d/
  40. sysusers.d/
  41. test/
  42. tmpfiles.d/
  43. tools/
  44. travis-ci/
  45. units/
  46. xorg/
  47. zanata.xml
README.md

systemd - System and Service Manager

Build Status
Coverity Scan Status
CII Best Practices
Build Status

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements are provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the HACKING file for information how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.

Stable branches with backported patches are available in the stable repo.