1. 11f5677 core: imply NNP and SUID/SGID restriction for DynamicUser=yes service by Lennart Poettering · 6 years ago v239-26
  2. 3d33855 analyze: check for RestrictSUIDSGID= in "systemd-analyze security" by Lennart Poettering · 6 years ago
  3. f79283a core: expose SUID/SGID restriction as new unit setting RestrictSUIDSGID= by Lennart Poettering · 6 years ago
  4. b39697a test: add test case for restrict_suid_sgid() by Jan Synacek · 5 years ago
  5. 5a62c0d seccomp: introduce seccomp_restrict_suid_sgid() for blocking chmod() for suid/sgid files by Lennart Poettering · 6 years ago
  6. 0528a88 main: introduce a define HIGH_RLIMIT_MEMLOCK similar to HIGH_RLIMIT_NOFILE by Lennart Poettering · 6 years ago v239-25
  7. 77a273e pid1: make sure to restore correct default values for some rlimits by Jan Synacek · 4 years, 10 months ago
  8. 781a055 sd-bus: use "queue" message references for managing r/w message queues in connection objects by Lennart Poettering · 6 years ago
  9. ceacf93 journal: use cleanup attribute at one more place by Yu Watanabe · 5 years ago v239-24
  10. dc4c3a5 journal: do not trigger assertion when journal_file_close() get NULL by Yu Watanabe · 5 years ago
  11. 2ec3c78 polkit: when authorizing via PK let's re-resolve callback/userdata instead of caching it by Jan Synacek · 4 years, 10 months ago
  12. 73b87f8 sd-event: add sd_event_source_disable_unref() helper by Zbigniew Jędrzejewski-Szmek · 6 years ago
  13. 8efdae7 sd-bus: introduce API for re-enqueuing incoming messages by Jan Synacek · 4 years, 10 months ago
  14. bc2d7df bus-message: introduce two kinds of references to bus messages by Lennart Poettering · 6 years ago
  15. 6180d5e sd-bus: always go through sd_bus_unref() to free messages by Lennart Poettering · 6 years ago
  16. 247d4f8 sd-bus: initialize mutex after we allocated the wqueue by Lennart Poettering · 6 years ago
  17. 7e99447 sd-bus: drop two inappropriate empty lines by Lennart Poettering · 6 years ago
  18. 19a9c67 sd-bus: make sure dispatch_rqueue() initializes return parameter on all types of success by Lennart Poettering · 6 years ago
  19. 9c23cee sd-bus: reorder bus ref and bus message ref handling by Lennart Poettering · 6 years ago
  20. 1d8e642 sd-bus: make rqueue/wqueue sizes of type size_t by Lennart Poettering · 6 years ago
  21. 966ecf0 cryptsetup: rework how we log about activation failures by Lennart Poettering · 6 years ago v239-23
  22. 3bbacfb cryptsetup: downgrade a log message we ignore by Lennart Poettering · 6 years ago
  23. ea0c4c3 cryptsetup: add some commenting about EAGAIN generation by Lennart Poettering · 6 years ago
  24. 05e184d crypt-util: Translate libcryptsetup log level instead of using log_debug() by Jan Janssen · 6 years ago
  25. 9040e15 cryptsetup-generator: guess whether the keyfile argument is two items or one by Zbigniew Jędrzejewski-Szmek · 5 years ago
  26. 5cdb2b0 cryptsetup: don't assert on variable which is optional by Zbigniew Jędrzejewski-Szmek · 5 years ago
  27. 0577d83 cryptsetup: use unabbrieviated variable names by Zbigniew Jędrzejewski-Szmek · 5 years ago
  28. 0f7a4f4 cryptsetup: add keyfile-timeout to allow a keydev timeout and allow to fallback to a password if it fails. by shinygold · 5 years ago
  29. 3cf9361 test-cpu-set-util: fix allocation size check on i386 by Zbigniew Jędrzejewski-Szmek · 5 years ago v239-21 v239-22
  30. f4344bb test-cpu-set-util: fix comparison for allocation size by Zbigniew Jędrzejewski-Szmek · 5 years ago
  31. 613a02b debug-generator: enable custom systemd.debug_shell tty by Jan Synacek · 6 years ago v239-20
  32. cb08463 core, job: fix breakage of ordering dependencies by systemctl reload command by HATAYAMA Daisuke · 5 years ago
  33. 40612e4 cryptsetup: reduce the chance that we will be OOM killed by Michal Sekletár · 4 years, 12 months ago
  34. b47f265 core: disable CPUAccounting by default by Michal Sekletár · 4 years, 12 months ago
  35. a735699 core: introduce NUMAPolicy and NUMAMask options by Michal Sekletár · 5 years ago
  36. 3589462 cpu-set-util: use %d-%d format in cpu_set_to_range_string() only for actual ranges by Michal Sekletar · 5 years ago
  37. b90f935 execute: dump CPUAffinity as a range string instead of a list of CPUs by Michal Sekletar · 5 years ago
  38. cabd905 shared/cpu-set-util: only force range printing one time by Zbigniew Jędrzejewski-Szmek · 5 years ago
  39. fb1244e systemctl: present CPUAffinity mask as a list of CPU index ranges by Michal Sekletar · 6 years ago
  40. 93777a6 shared/cpu-set-util: introduce cpu_set_to_range() by Michal Sekletar · 6 years ago
  41. fd65ead test-cpu-set-util: add test for dbus conversions by Zbigniew Jędrzejewski-Szmek · 5 years ago
  42. daa0243 shared/cpu-set-util: make transfer of cpu_set_t over bus endian safe by Michal Sekletar · 6 years ago
  43. 7aa3209 shared/cpu-set-util: drop now-unused cleanup function by Zbigniew Jędrzejewski-Szmek · 5 years ago
  44. 5e6b616 test-execute: use CPUSet too by Zbigniew Jędrzejewski-Szmek · 5 years ago
  45. 0387294 pid1: when reloading configuration, forget old settings by Zbigniew Jędrzejewski-Szmek · 6 years ago
  46. f71f327 pid1: don't reset setting from /proc/cmdline upon restart by Zbigniew Jędrzejewski-Szmek · 6 years ago
  47. 8bf8409 pid1: parse CPUAffinity= in incremental fashion by Zbigniew Jędrzejewski-Szmek · 6 years ago
  48. 69541e9 test-cpu-set-util: add a smoke test for test_parse_cpu_set_extend() by Zbigniew Jędrzejewski-Szmek · 6 years ago
  49. a1ed6bf test-cpu-set-util: add simple test for cpus_in_affinity_mask() by Zbigniew Jędrzejewski-Szmek · 6 years ago
  50. 4203274 Move cpus_in_affinity_mask() to cpu-set-util.[ch] by Zbigniew Jędrzejewski-Szmek · 5 years ago
  51. 61e5aed Rework cpu affinity parsing by Zbigniew Jędrzejewski-Szmek · 6 years ago
  52. d6935e6 shared/cpu-set-util: remove now-unused CPU_SIZE_TO_NUM() by Zbigniew Jędrzejewski-Szmek · 6 years ago
  53. 46b4d26 shared/cpu-set-util: move the part to print cpu-set into a separate function by Zbigniew Jędrzejewski-Szmek · 6 years ago
  54. 5d7e8cb core/dbus-execute: remove unnecessary initialization by Zbigniew Jędrzejewski-Szmek · 6 years ago
  55. 789806a core: change ownership/mode of the execution directories also for static users by Lennart Poettering · 6 years ago
  56. 81ca39b execute: remove one redundant comparison check by Lennart Poettering · 6 years ago
  57. 5df63c2 Add a warning about the difference in permissions between existing directories and unit settings. by Taro Yamada · 6 years ago
  58. 3521217 journald: take leading spaces into account in syslog_parse_identifier by Evgeny Vereshchagin · 6 years ago
  59. 2d197ad fuzz-journal-stream: avoid assertion failure on samples which don't fit in pipe by Zbigniew Jędrzejewski-Szmek · 6 years ago
  60. 76e2fa8 tests: add a fuzzer for server_process_native_file by Evgeny Vereshchagin · 6 years ago
  61. e7077e3 tests: add a fuzzer for journald streams by Evgeny Vereshchagin · 6 years ago
  62. b276c85 tests: introduce dummy_server_init and use it in all journald fuzzers by Evgeny Vereshchagin · 6 years ago
  63. bef599d journald: check whether sscanf has changed the value corresponding to %n by Evgeny Vereshchagin · 6 years ago
  64. f991a9c tests: add a fuzzer for process_audit_string by Evgeny Vereshchagin · 6 years ago
  65. af471e7 test: initialize syslog_fd in fuzz-journald-kmsg too by Evgeny Vereshchagin · 6 years ago
  66. f00d221 journal: fix an off-by-one error in dev_kmsg_record by Evgeny Vereshchagin · 6 years ago
  67. 43d7262 basic: remove an assertion from cunescape_one by Evgeny Vereshchagin · 6 years ago
  68. e7e70f5 tests: add a fuzzer for dev_kmsg_record by Evgeny Vereshchagin · 6 years ago
  69. 18a45cf tests: put fuzz_journald_processing_function in a .c file by Evgeny Vereshchagin · 6 years ago
  70. 62623ba sd-bus: bump message queue size again by Jan Synacek · 5 years ago
  71. 76176de basic/user-util: allow dots in user names by Jan Synacek · 5 years ago
  72. 4d2145e journal: rely on _cleanup_free_ to free a temporary string used in client_context_read_cgroup by Evgeny Vereshchagin · 6 years ago
  73. 7b00cae resolved: query polkit only after parsing the data by Zbigniew Jędrzejewski-Szmek · 5 years ago v239-19
  74. ddd08e7 resolved: allow access to Set*Link and Revert methods through polkit by Zbigniew Jędrzejewski-Szmek · 5 years ago
  75. d95afbc resolved: do not run loop twice by Zbigniew Jędrzejewski-Szmek · 5 years ago
  76. 7e0f9a0 sd-bus: adjust indentation of comments by Zbigniew Jędrzejewski-Szmek · 5 years ago
  77. c3be943 shared/but-util: drop trusted annotation from bus_open_system_watch_bind_with_description() by Zbigniew Jędrzejewski-Szmek · 5 years ago
  78. 080d3b1 udev: Add id program and rule for FIDO security tokens by Fabian Henneke · 5 years ago
  79. 0160499 sd-device: introduce log_device_*() macros by Yu Watanabe · 6 years ago
  80. cc3c020 selinux: don't log SELINUX_INFO and SELINUX_WARNING messages to audit by Michal Sekletar · 6 years ago
  81. 069cf14 shared/sleep-config: exclude zram devices from hibernation candidates by Andrew Jorgensen · 6 years ago
  82. 33aa231 journald: fixed assertion failure when system journal rotation fails (#9893) by Renaud Métrich · 6 years ago
  83. 55d9d6d path: stop watching path specs once we triggered the target unit by Michal Sekletar · 5 years ago
  84. a26f2b2 core: implement per unit journal rate limiting by Anita Zhang · 6 years ago
  85. 25b9353 core: only watch processes when it's really necessary by Franck Bui · 6 years ago
  86. 79e9566 core: reduce the number of stalled PIDs from the watched processes list when possible by Franck Bui · 6 years ago
  87. f057aa6 process-util: introduce pid_is_my_child() helper by Franck Bui · 6 years ago
  88. 1bf9236 Consider smb3 as remote filesystem by Jan Synacek · 5 years ago
  89. e1bd03e Call getgroups() to know size of supplementary groups array to allocate by Renaud Métrich · 5 years ago
  90. d6210c3 udev: introduce CONST key name by Jan Synacek · 5 years ago
  91. 985837d core: try to reopen /dev/kmsg again right after mounting /dev by Lennart Poettering · 5 years ago
  92. c6c8e0d ask-password: prevent buffer overrow when reading from keyring by Thadeu Lima de Souza Cascardo · 6 years ago
  93. 6240d78 kernel-install: do not require non-empty kernel cmdline by Zbigniew Jędrzejewski-Szmek · 5 years ago
  94. fbe5fa2 sd-bus: make strict asan shut up by Lennart Poettering · 6 years ago
  95. 8bd791f syslog: fix segfault in syslog_parse_priority() by Yu Watanabe · 6 years ago
  96. cffe5d0 core: never propagate reload failure to service result by Lennart Poettering · 5 years ago
  97. ebe9346 analyze-security: fix potential division by zero by Jan Synacek · 5 years ago v239-17 v239-18
  98. a0c135f swap: scan /proc/swaps before processing waitid() results by Lennart Poettering · 5 years ago
  99. 4bc21bb mount: rescan /proc/self/mountinfo before processing waitid() results by Lennart Poettering · 5 years ago
  100. daf63a3 mount: simplify /proc/self/mountinfo handler by Lennart Poettering · 5 years ago