summaryrefslogtreecommitdiffstats
path: root/src/portable/profile/default (follow)
Commit message (Collapse)AuthorAgeFilesLines
* portabled: update profiles to current semanticsLennart Poettering2021-01-201-2/+0
| | | | | | | | MountAPIVFS= implicitly mounts /run as tmpfs now, no need to do this explicitly. The notification socket is now implicitly mounted too, if NotifyAccess= and RootImage=/RootDirectory= are used together.
* portable: add SystemCallFilter=@system-service to the three main portable ↵Lennart Poettering2018-06-141-0/+2
| | | | | | | service profiles … but leave the "trusted" profile unmodified, it shall have full access to all system calls, as before.
* add new portable service frameworkLennart Poettering2018-05-241-0/+30
This adds a small service "systemd-portabled" and a matching client "portablectl", which implement the "portable service" concept. The daemon implements the actual operations, is PolicyKit-enabled and is activated on demand with exit-on-idle. Both the daemon and the client are an optional build artifact, enabled by default rhough.