- 11f5677 core: imply NNP and SUID/SGID restriction for DynamicUser=yes service by Lennart Poettering · 6 years ago v239-26
- b0573f1 units: turn on RestrictSUIDSGID= in most of our long-running daemons by Lennart Poettering · 6 years ago
- 797ebaa man: document the new RestrictSUIDSGID= setting by Lennart Poettering · 6 years ago
- 3d33855 analyze: check for RestrictSUIDSGID= in "systemd-analyze security" by Lennart Poettering · 6 years ago
- f79283a core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID= by Lennart Poettering · 6 years ago
- b39697a test: add test case for restrict_suid_sgid() by Jan Synacek · 5 years ago
- 5a62c0d seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for suid/sgid files by Lennart Poettering · 6 years ago
- 0528a88 main: introduce a define HIGH_RLIMIT_MEMLOCK similar to HIGH_RLIMIT_NOFILE by Lennart Poettering · 6 years ago v239-25
- 77a273e pid1: make sure to restore correct default values for some rlimits by Jan Synacek · 4 years, 9 months ago
- 781a055 sd-bus: use "queue" message references for managing r/w message queues in connection objects by Lennart Poettering · 6 years ago
- ceacf93 journal: use cleanup attribute at one more place by Yu Watanabe · 5 years ago v239-24
- dc4c3a5 journal: do not trigger assertion when journal_file_close() get NULL by Yu Watanabe · 5 years ago
- b9be2c6 sysctl: let's by default increase the numeric PID range from 2^16 to 2^22 by Michal Sekletár · 4 years, 11 months ago
- 2ec3c78 polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it by Jan Synacek · 4 years, 10 months ago
- 73b87f8 sd-event: add sd_event_source_disable_unref() helper by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 8efdae7 sd-bus: introduce API for re-enqueuing incoming messages by Jan Synacek · 4 years, 10 months ago
- bc2d7df bus-message: introduce two kinds of references to bus messages by Lennart Poettering · 6 years ago
- 6180d5e sd-bus: always go through sd_bus_unref() to free messages by Lennart Poettering · 6 years ago
- 247d4f8 sd-bus: initialize mutex after we allocated the wqueue by Lennart Poettering · 6 years ago
- 7e99447 sd-bus: drop two inappropriate empty lines by Lennart Poettering · 6 years ago
- 19a9c67 sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success by Lennart Poettering · 6 years ago
- 9c23cee sd-bus: reorder bus ref and bus message ref handling by Lennart Poettering · 6 years ago
- 1d8e642 sd-bus: make rqueue/wqueue sizes of type size_t by Lennart Poettering · 6 years ago
- b7f9d75 rules: reintroduce 60-alias-kmsg.rules by Jan Synacek · 4 years, 11 months ago
- 966ecf0 cryptsetup: rework how we log about activation failures by Lennart Poettering · 6 years ago v239-23
- 3bbacfb cryptsetup: downgrade a log message we ignore by Lennart Poettering · 6 years ago
- ea0c4c3 cryptsetup: add some commenting about EAGAIN generation by Lennart Poettering · 6 years ago
- 05e184d crypt-util: Translate libcryptsetup log level instead of using log_debug() by Jan Janssen · 6 years ago
- 9040e15 cryptsetup-generator: guess whether the keyfile argument is two items or one by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 5cdb2b0 cryptsetup: don't assert on variable which is optional by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 0577d83 cryptsetup: use unabbrieviated variable names by Zbigniew Jędrzejewski-Szmek · 5 years ago
- fdb8618 cryptsetup: add documentation for keyfile-timeout by shinygold · 5 years ago
- 0f7a4f4 cryptsetup: add keyfile-timeout to allow a keydev timeout and allow to fallback to a password if it fails. by shinygold · 5 years ago
- c3513c7 catalog: fix name of variable by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 3cf9361 test-cpu-set-util: fix allocation size check on i386 by Zbigniew Jędrzejewski-Szmek · 5 years ago v239-21 v239-22
- f4344bb test-cpu-set-util: fix comparison for allocation size by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 613a02b debug-generator: enable custom systemd.debug_shell tty by Jan Synacek · 6 years ago v239-20
- cb08463 core, job: fix breakage of ordering dependencies by systemctl reload command by HATAYAMA Daisuke · 5 years ago
- 40612e4 cryptsetup: reduce the chance that we will be OOM killed by Michal Sekletár · 4 years, 12 months ago
- cf1a9df set kptr_restrict=1 by David Tardon · 4 years, 12 months ago
- b47f265 core: disable CPUAccounting by default by Michal Sekletár · 4 years, 12 months ago
- a735699 core: introduce NUMAPolicy and NUMAMask options by Michal Sekletár · 5 years ago
- 3589462 cpu-set-util: use %d-%d format in cpu_set_to_range_string() only for actual ranges by Michal Sekletar · 5 years ago
- b90f935 execute: dump CPUAffinity as a range string instead of a list of CPUs by Michal Sekletar · 5 years ago
- cabd905 shared/cpu-set-util: only force range printing one time by Zbigniew Jędrzejewski-Szmek · 5 years ago
- fb1244e systemctl: present CPUAffinity mask as a list of CPU index ranges by Michal Sekletar · 6 years ago
- 93777a6 shared/cpu-set-util: introduce cpu_set_to_range() by Michal Sekletar · 6 years ago
- fd65ead test-cpu-set-util: add test for dbus conversions by Zbigniew Jędrzejewski-Szmek · 5 years ago
- daa0243 shared/cpu-set-util: make transfer of cpu_set_t over bus endian safe by Michal Sekletar · 6 years ago
- 7aa3209 shared/cpu-set-util: drop now-unused cleanup function by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 5e6b616 test-execute: use CPUSet too by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 0387294 pid1: when reloading configuration, forget old settings by Zbigniew Jędrzejewski-Szmek · 6 years ago
- f71f327 pid1: don't reset setting from /proc/cmdline upon restart by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 8bf8409 pid1: parse CPUAffinity= in incremental fashion by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 69541e9 test-cpu-set-util: add a smoke test for test_parse_cpu_set_extend() by Zbigniew Jędrzejewski-Szmek · 6 years ago
- a1ed6bf test-cpu-set-util: add simple test for cpus_in_affinity_mask() by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 4203274 Move cpus_in_affinity_mask() to cpu-set-util.[ch] by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 61e5aed Rework cpu affinity parsing by Zbigniew Jędrzejewski-Szmek · 6 years ago
- d6935e6 shared/cpu-set-util: remove now-unused CPU_SIZE_TO_NUM() by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 46b4d26 shared/cpu-set-util: move the part to print cpu-set into a separate function by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 5d7e8cb core/dbus-execute: remove unnecessary initialization by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 789806a core: change ownership/mode of the execution directories also for static users by Lennart Poettering · 6 years ago
- 81ca39b execute: remove one redundant comparison check by Lennart Poettering · 6 years ago
- 5df63c2 Add a warning about the difference in permissions between existing directories and unit settings. by Taro Yamada · 6 years ago
- 3521217 journald: take leading spaces into account in syslog_parse_identifier by Evgeny Vereshchagin · 6 years ago
- 2d197ad fuzz-journal-stream: avoid assertion failure on samples which don't fit in pipe by Zbigniew Jędrzejewski-Szmek · 6 years ago
- 76e2fa8 tests: add a fuzzer for server_process_native_file by Evgeny Vereshchagin · 6 years ago
- e7077e3 tests: add a fuzzer for journald streams by Evgeny Vereshchagin · 6 years ago
- b276c85 tests: introduce dummy_server_init and use it in all journald fuzzers by Evgeny Vereshchagin · 6 years ago
- bef599d journald: check whether sscanf has changed the value corresponding to %n by Evgeny Vereshchagin · 6 years ago
- f991a9c tests: add a fuzzer for process_audit_string by Evgeny Vereshchagin · 6 years ago
- af471e7 test: initialize syslog_fd in fuzz-journald-kmsg too by Evgeny Vereshchagin · 6 years ago
- 375fd5f tests: add a reproducer for a heap-buffer-overflow fixed in 937b1171378bc1000a by Evgeny Vereshchagin · 6 years ago
- 4caa887 tests: add a reproducer for a memory leak fixed in 30eddcd51b8a472e05d3b8d1 in August by Evgeny Vereshchagin · 6 years ago
- f00d221 journal: fix an off-by-one error in dev_kmsg_record by Evgeny Vereshchagin · 6 years ago
- 43d7262 basic: remove an assertion from cunescape_one by Evgeny Vereshchagin · 6 years ago
- e7e70f5 tests: add a fuzzer for dev_kmsg_record by Evgeny Vereshchagin · 6 years ago
- 18a45cf tests: put fuzz_journald_processing_function in a .c file by Evgeny Vereshchagin · 6 years ago
- 62623ba sd-bus: bump message queue size again by Jan Synacek · 5 years ago
- 76176de basic/user-util: allow dots in user names by Jan Synacek · 5 years ago
- 4d2145e journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup by Evgeny Vereshchagin · 6 years ago
- 7b00cae resolved: query polkit only after parsing the data by Zbigniew Jędrzejewski-Szmek · 5 years ago v239-19
- ddd08e7 resolved: allow access to Set*Link and Revert methods through polkit by Zbigniew Jędrzejewski-Szmek · 5 years ago
- d95afbc resolved: do not run loop twice by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 7e0f9a0 sd-bus: adjust indentation of comments by Zbigniew Jędrzejewski-Szmek · 5 years ago
- c3be943 shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() by Zbigniew Jędrzejewski-Szmek · 5 years ago
- 080d3b1 udev: Add id program and rule for FIDO security tokens by Fabian Henneke · 5 years ago
- 0160499 sd-device: introduce log_device_*() macros by Yu Watanabe · 6 years ago
- cc3c020 selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit by Michal Sekletar · 6 years ago
- 069cf14 shared/sleep-config: exclude zram devices from hibernation candidates by Andrew Jorgensen · 6 years ago
- 27d1aca test: bump the second partition's size to 50M by Frantisek Sumsal · 5 years ago
- c748b95 test: mask several unnecessary services by Yu Watanabe · 6 years ago
- a7f18f9 test: use PBKDF2 instead of Argon2 in cryptsetup... by Frantisek Sumsal · 6 years ago
- 33aa231 journald: fixed assertion failure when system journal rotation fails (#9893) by Renaud Métrich · 6 years ago
- 55d9d6d path: stop watching path specs once we triggered the target unit by Michal Sekletar · 5 years ago
- a26f2b2 core: implement per unit journal rate limiting by Anita Zhang · 6 years ago
- 25b9353 core: only watch processes when it's really necessary by Franck Bui · 6 years ago
- 79e9566 core: reduce the number of stalled PIDs from the watched processes list when possible by Franck Bui · 6 years ago
- f057aa6 process-util: introduce pid_is_my_child() helper by Franck Bui · 6 years ago
- 1bf9236 Consider smb3 as remote filesystem by Jan Synacek · 5 years ago