summaryrefslogtreecommitdiffstats
path: root/src/core/namespace.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* dissect-image: Explicitly remove partitions when done with imageDaan De Meyer2022-05-231-0/+1
* devnum-util: define helper macros for formatting devnum major/minor pairsLennart Poettering2022-04-131-2/+3
* tree-wide: take BSD lock on loopback devices we dissect/mount/operate onLennart Poettering2022-04-101-0/+14
* core: fix dm-verity auto-discovery in MountImageUnit()Luca Boccassi2022-04-071-1/+1
* core/namespace: inline one more iterator variableYu Watanabe2022-03-231-7/+5
* strv: make iterator in STRV_FOREACH() declaread in the loopYu Watanabe2022-03-191-6/+0
* list: declare iterator of LIST_FOREACH() in the loopYu Watanabe2022-03-191-1/+0
* core: support ExtensionDirectories in user managerLuca Boccassi2022-03-101-4/+5
* core: support MountAPIVFS and RootDirectory in user managerLuca Boccassi2022-03-101-3/+20
* core: create parent directory for mount point of ExtensionDirectoriesLuca Boccassi2022-03-091-3/+3
* core: don't fail on EEXIST when creating mount pointLuca Boccassi2022-01-311-1/+1
* core: add clearer debug log when setting up ExecDirectories symlinks failsLuca Boccassi2022-01-271-1/+1
* Merge pull request #22203 from brauner/2022-01-21.procsubset.pidLuca Boccassi2022-01-241-3/+15
|\
| * core/namespace: s/normalize_mounts()/drop_unused_mounts()Christian Brauner2022-01-241-3/+10
| * core/namespace: allow using ProtectSubset=pid and ProtectHostname=true togetherChristian Brauner2022-01-241-0/+5
* | core: add ExtensionDirectories= settingLuca Boccassi2022-01-211-12/+118
|/
* core: refuse to mount ExtensionImages if the base layer doesn't at least have...Luca Boccassi2022-01-191-0/+2
* namespace: allow overriding /run with a TemporaryFileSystem=Topi Miettinen2021-12-111-1/+1
* namespace: allow ProcSubset=pid with some ProtectKernel optionsTopi Miettinen2021-11-271-8/+34
* extension-release.d/: add a new field SYSEXT_SCOPE= for clarifying what a sys...Lennart Poettering2021-11-231-1/+1
* tree-wide: port various places over to open_mkdir_at()Lennart Poettering2021-11-171-7/+10
* shared: clean up mkdir.h/label.h situationLennart Poettering2021-11-161-1/+1
* namespace: make tmp dir handling code independent of umask tooLennart Poettering2021-11-121-5/+7
* namespace: make whole namespace_setup() work regardless of configured umaskLennart Poettering2021-11-121-3/+4
* namespace: rebreak a few commentsLennart Poettering2021-11-121-16/+14
* core: make DynamicUser=1 and StateDirectory= work with TemporaryFileSystem=/v...Luca Boccassi2021-10-271-1/+35
* basic: spit out chase_symlinks() from fs-util.[ch] → chase-symlinks.[ch]Lennart Poettering2021-10-051-1/+1
* dissect-image: load embedded verity signature info from imageLennart Poettering2021-09-281-0/+7
* tree-wide: mark set-but-not-used variables as unused to make LLVM happyFrantisek Sumsal2021-09-151-1/+1
* Merge pull request #20257 from bluca/seqnoLuca Boccassi2021-08-311-0/+1
|\
| * dissect: use DISKSEQ when waiting for block devicesLuca Boccassi2021-07-281-0/+1
* | tree-wide: port everything over to new sd-id128 compund literal blissLennart Poettering2021-08-201-2/+1
* | Drop the text argument from assert_not_reached()Zbigniew Jędrzejewski-Szmek2021-08-031-3/+3
|/
* Revert "core: do not set noexec on sysfs/procfs"Lennart Poettering2021-07-011-1/+1
* core/namespace: drop unnecessary initializationsYu Watanabe2021-06-261-6/+6
* Merge pull request #20023 from yuwata/re-enable-nosuid-mount-flagZbigniew Jędrzejewski-Szmek2021-06-251-0/+32
|\
| * Revert "Revert "Mount all fs nosuid when NoNewPrivileges=yes""Yu Watanabe2021-06-251-0/+32
* | ExtensionImages: log explicit error when extension-release metadata does not ...Luca Boccassi2021-06-251-0/+9
|/
* Revert "Mount all fs nosuid when NoNewPrivileges=yes"Topi Miettinen2021-06-141-32/+0
* Mount all fs nosuid when NoNewPrivileges=yesTopi Miettinen2021-05-261-0/+32
* dissect-image: add support for optionally mounting images with idmapping onLennart Poettering2021-05-071-1/+1
* tree-wide: enable automatic growing of file systems in images in various tool...Lennart Poettering2021-04-231-1/+2
* dissect: ignore udev database entries from before the loopback attachmentLennart Poettering2021-04-201-0/+1
* dissect: ignore old uevents when waiting for loopback partition scanLennart Poettering2021-04-201-0/+1
* dissect: split read-only flag into twoLennart Poettering2021-04-191-1/+1
* tree-wide: avoid uninitialized warning on _cleanup_ variablesLuca Boccassi2021-04-141-2/+2
* Merge pull request #18958 from poettering/dissect-no-rootZbigniew Jędrzejewski-Szmek2021-03-311-3/+7
|\
| * execute: drop DissectImageFlags parameter from namespace_setup()Lennart Poettering2021-03-161-3/+7
| * dissect-image: split DISSECT_IMAGE_REQUIRE_ROOT in twoLennart Poettering2021-03-161-1/+1
* | tree-wide: coccinelle fixesFrantisek Sumsal2021-03-181-4/+2
|/