summaryrefslogtreecommitdiffstats
path: root/src/test/test-ns.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* namespace: make setup_namespace() less crazyLennart Poettering2023-10-111-41/+39
* core: Use a subdirectory of /run/ for PrivateDevices=Daan De Meyer2023-10-021-0/+1
* Revert "core: do not leak mount for credentials directory if mount namespace ...Yu Watanabe2023-09-061-1/+0
* core: do not leak mount for credentials directory if mount namespace is enabledYu Watanabe2023-08-221-0/+1
* core: copy the host's os-release for /run/host/os-releaseLuca Boccassi2023-07-181-0/+1
* namespace: Load sidecar verity settings in apply_mount_namespace()Daan De Meyer2023-06-201-6/+0
* tree-wide: hook up image dissection policy logic everywhereLennart Poettering2023-04-051-0/+3
* core: support ExtensionDirectories in user managerLuca Boccassi2022-03-101-0/+1
* core: add ExtensionDirectories= settingLuca Boccassi2022-01-211-0/+1
* core: make DynamicUser=1 and StateDirectory= work with TemporaryFileSystem=/v...Luca Boccassi2021-10-271-0/+1
* execute: drop DissectImageFlags parameter from namespace_setup()Lennart Poettering2021-03-161-1/+0
* Add ExtensionImages directive to form overlaysLuca Boccassi2021-02-231-0/+2
* New directives NoExecPaths= ExecPaths=Topi Miettinen2021-01-291-0/+15
* core: make NotifyAccess= in combination with RootDirectory=/RootImage= workLennart Poettering2021-01-201-0/+1
* core: add DBUS method to bind mount new nodes without service restartLuca Boccassi2021-01-181-0/+2
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
* core: hide /run/credentials whenever namespacing is requestedLennart Poettering2020-08-251-0/+1
* core: introduce ProtectProc= and ProcSubset= to expose hidepid= and subset= p...Lennart Poettering2020-08-241-0/+2
* namespace: move protect_{home|system} into NamespaceInfoLennart Poettering2020-08-241-2/+0
* core: new feature MountImagesLuca Boccassi2020-08-051-0/+2
* service: add new RootImageOptions featureLuca Boccassi2020-07-291-0/+1
* core: add RootHashSignature service parameterLuca Boccassi2020-06-251-0/+3
* core: add RootHash and RootVerity service parametersLuca Boccassi2020-06-231-0/+4
* tree-wide: fix spelling of lookup and setup verbsZbigniew Jędrzejewski-Szmek2020-03-031-1/+1
* core: add new LogNamespace= execution settingLennart Poettering2020-01-311-0/+1
* pid1: improve message when setting up namespace failsZbigniew Jędrzejewski-Szmek2019-05-221-1/+2
* tests: use a helper function to parse environment and open loggingZbigniew Jędrzejewski-Szmek2018-09-141-1/+2
* tree-wide: remove Lennart's copyright linesLennart Poettering2018-06-141-3/+0
* tree-wide: drop 'This file is part of systemd' blurbLennart Poettering2018-06-141-2/+0
* tree-wide: drop license boilerplateZbigniew Jędrzejewski-Szmek2018-04-061-13/+0
* core: add new setting TemporaryFileSystem=Yu Watanabe2018-02-211-0/+1
* log: minimize includes in log.hLennart Poettering2018-01-111-0/+1
* Add SPDX license identifiers to source files under the LGPLZbigniew Jędrzejewski-Szmek2017-11-191-0/+1
* namespace: change NameSpace → NamespaceLennart Poettering2017-10-101-1/+1
* execute: make StateDirectory= and friends compatible with DynamicUser=1 and R...Lennart Poettering2017-10-021-0/+1
* core: add RootImage= setting for using a specific image file as root director...Lennart Poettering2017-02-071-0/+2
* core: add ability to define arbitrary bind mounts for servicesLennart Poettering2016-12-141-0/+1
* core:sandbox: lets make /lib/modules/ inaccessible on ProtectKernelModules=Djalal Harouni2016-10-121-3/+9
* namespace: chase symlinks for mounts to set up in userspaceLennart Poettering2016-09-251-3/+7
* namespace: make sure InaccessibleDirectories= masks all mounts further downLennart Poettering2016-09-251-1/+3
* core: add two new service settings ProtectKernelTunables= and ProtectControlG...Lennart Poettering2016-09-251-0/+2
* Remove kdbus custom endpoint supportDaniel Mack2016-02-111-1/+0
* tree-wide: remove Emacs lines from all filesDaniel Mack2016-02-101-2/+0
* tree-wide: sort includesThomas Hindoe Paaboel Andersen2015-11-161-1/+1
* core: Private*/Protect* options with RootDirectoryAlban Crequy2015-05-181-2/+22
* remove unused includesThomas Hindoe Paaboel Andersen2015-02-231-4/+0
* treewide: use log_*_errno whenever %m is in the format stringMichal Schmidt2014-11-281-1/+1
* treewide: no need to negate errno for log_*_errno()Michal Schmidt2014-11-281-1/+1
* treewide: auto-convert the simple cases to log_*_errno()Michal Schmidt2014-11-281-1/+1
* namespace: add support for custom kdbus endpointDaniel Mack2014-09-081-0/+1