summaryrefslogtreecommitdiffstats
path: root/src/basic/capability-util.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* capability-util: avoid thread_localLennart Poettering2024-04-241-23/+24
* capability-util: avoid false-positive use-of-uninitialized-value errorYu Watanabe2023-11-281-1/+2
* core: allow using seccomp without no_new_privs when unprivilegedIago López Galeiras2023-11-071-4/+12
* Include <threads.h> if possible to get thread_local definitionCristian Rodríguez2023-03-061-0/+1
* capability-util: add new capability_get_ambient() helperLennart Poettering2023-02-221-0/+25
* capability-util: use UINT32_MAX as shortcut where appropriateaLennart Poettering2023-02-201-2/+2
* capability-util: add macro for largest cap we're willing to acceptLennart Poettering2023-02-201-7/+9
* capability-util: add CAP_MASK_ALL + CAP_MASK_UNSET macrosLennart Poettering2023-02-201-8/+8
* cap-list: refuse parsing numeric capability 63Lennart Poettering2023-02-201-4/+4
* basic: rename util.h to logarithm.hZbigniew Jędrzejewski-Szmek2022-11-081-1/+1
* basic/util: rename u64log2 to log2u64Zbigniew Jędrzejewski-Szmek2021-11-261-1/+1
* tree-wide: use UINT64_MAX or friendsYu Watanabe2021-03-041-8/+8
* basic/capability-util: add missing initializationZbigniew Jędrzejewski-Szmek2021-02-161-1/+1
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
* capability-util: add new function for raising setpcapTobias Kaufmann2020-09-011-14/+26
* basic/capability-util: let cap_last_cap() return unsigned integerZbigniew Jędrzejewski-Szmek2020-07-101-19/+12
* Check ambient set against bounding set prior to applying ambient setsterlinghughes2020-05-291-0/+12
* capability: don't skip ambient caps setup if we actually have something to setLennart Poettering2020-04-031-3/+5
* basic: Fix capability_ambient_set_apply for kernels < 4.3Kevin Kuehler2020-03-291-0/+4
* basic: Drop ambient inherited capabilities by defaultKevin Kuehler2019-11-261-10/+18
* tree-wide: drop pwd.h and grp.h when user-util.h is includedYu Watanabe2019-11-031-1/+0
* tree-wide: drop capability.h when capability-util.h is includedYu Watanabe2019-11-031-1/+0
* nspawn: don't hard fail when setting capabilitiesAnita Zhang2019-06-201-0/+38
* capability: fix loops for cap_last_cap()Lennart Poettering2019-06-201-2/+2
* capability-util: be more careful with typesLennart Poettering2019-05-281-8/+5
* Merge pull request #12059 from poettering/nspawn-typosZbigniew Jędrzejewski-Szmek2019-03-211-24/+25
|\
| * capability: also cap CAP_LAST_CAP at 63Lennart Poettering2019-03-211-1/+1
| * capability: typo fixLennart Poettering2019-03-211-2/+2
| * capability: use UINT64_C() where appropriateLennart Poettering2019-03-211-1/+1
| * capability: minimize scope of a few variablesLennart Poettering2019-03-211-15/+16
| * capability: minor coding style updatesLennart Poettering2019-03-211-4/+4
| * capability: add missing ')'Lennart Poettering2019-03-211-1/+1
* | util-lib: get rid of a helper variableZbigniew Jędrzejewski-Szmek2019-03-211-7/+2
|/
* capability: let's protect against the kernel eventually doing more than 64 capsLennart Poettering2019-03-151-5/+10
* capability: deal with libcap being older than kernelLennart Poettering2019-03-151-3/+18
* capability: keep CAP_SETPCAP while dropping bounding capsLennart Poettering2019-03-151-3/+41
* capability: fix build without PR_CAP_AMBIENTFabrice Fontaine2019-01-111-0/+1
* capability: add new type for maintaining all five cap sets as oneLennart Poettering2018-11-291-0/+125
* tree-wide: remove Lennart's copyright linesLennart Poettering2018-06-141-3/+0
* tree-wide: drop 'This file is part of systemd' blurbLennart Poettering2018-06-141-2/+0
* util: add new write_string_filef() helperLennart Poettering2018-06-061-12/+4
* tree-wide: avoid assignment of r just to use in a comparisonZbigniew Jędrzejewski-Szmek2018-04-241-2/+1
* tree-wide: drop license boilerplateZbigniew Jędrzejewski-Szmek2018-04-061-13/+0
* Add SPDX license identifiers to source files under the LGPLZbigniew Jędrzejewski-Szmek2017-11-191-0/+1
* capability: add new ambient_capabilities_supported() helperLennart Poettering2017-08-101-0/+15
* capability: change capability_bounding_set_drop() to be work without privileg...Lennart Poettering2017-08-101-40/+49
* user-util: rework maybe_setgroups() a bitLennart Poettering2016-10-061-2/+3
* core: do not fail in a container if we can't use setgroupsGiuseppe Scrivano2016-10-061-1/+2
* tree-wide: remove Emacs lines from all filesDaniel Mack2016-02-101-2/+0
* capabilities: added support for ambient capabilities.Ismo Puustinen2016-01-121-0/+55