8351ceaea9
execute: support syscall filtering using seccomp filters
2012-07-17 04:17:53 +02:00
34511ca7b1
man: reword man page titles
...
Make sure the man page titles are similar in style and capitalization so
that our man page index looks pretty.
2012-07-16 18:08:25 +02:00
e06c73cc91
unit: set default working directory to the user's home directory when running in user mode
2012-07-16 12:44:42 +02:00
49f43d5f91
Spelling fixes.
2012-07-16 12:16:29 +02:00
cb07866b1b
man: move header file man pages from section 7 to 3
...
This way we can include documentation about minor macros/inline function
within the introducionary man page in a sane way.
2012-07-13 01:50:05 +02:00
d88a251b12
util: introduce a proper nsec_t and make use of it where appropriate
2012-05-31 04:27:03 +02:00
ec8927ca59
main: add configuration option to alter capability bounding set for PID 1
...
This also ensures that caps dropped from the bounding set are also
dropped from the inheritable set, to be extra-secure. Usually that should
change very little though as the inheritable set is empty for all our uses
anyway.
2012-05-24 04:00:56 +02:00
5430f7f2bc
relicense to LGPLv2.1 (with exceptions)
...
We finally got the OK from all contributors with non-trivial commits to
relicense systemd from GPL2+ to LGPL2.1+.
Some udev bits continue to be GPL2+ for now, but we are looking into
relicensing them too, to allow free copy/paste of all code within
systemd.
The bits that used to be MIT continue to be MIT.
The big benefit of the relicensing is that closed source code may now
link against libsystemd-login.so and friends.
2012-04-12 00:24:39 +02:00
169c4f6513
journalctl,loginctl: drop systemd- prefix in binary names
...
Let's make things a bit easier to type, drop the systemd- prefix for
journalctl and loginctl, but provide the old names for compat.
All systemd binaries are hence now prefixed with "systemd-" with the
exception of the three primary user interface binaries:
systemctl
loginctl
journalctl
For those three we do provide systemd-xyz names as well, via symlinks:
systemd-systemctl → systemctl
systemd-loginctl → loginctl
systemd-journalctl → journalctl
We do this only for the *primary* user tools, in order to avoid
unnecessary namespace problems. That means tools like systemd-notify
stay the way they are.
2012-03-26 20:58:47 +02:00
353e12c2f4
service: ignore SIGPIPE by default
2012-02-09 03:18:04 +01:00
9f056f4087
man: document that we support tcpwrappers only for access control
...
We do not support, and explicitly never want to support environment
variable settings and suchlike in tcpwrappers.
https://bugs.freedesktop.org/show_bug.cgi?id=45143
2012-02-02 06:22:36 +01:00
891703e1ee
persistant -> persistent
2012-01-18 21:47:30 +01:00
8d53b4534a
exec: introduce ControlGroupPersistant= to make cgroups persistant
2012-01-18 15:40:21 +01:00
706343f492
journal: introduce log target 'journal' for executed processes
2012-01-06 02:48:38 +01:00
7734f77373
man: for ExecStart= provide more details on env var substitution and how that turns into arguments.
...
For EnvironmentFile= explain that double quotes can be used
to protect whitespace.
2011-10-11 01:11:26 +02:00
de6c78f879
service: change default stdout/stderr to syslog
2011-08-30 22:57:58 +02:00
346bce1f4c
stdout-bridge: rename logger to stdout-syslog-bridge to make it more descriptive
2011-08-30 22:42:49 +02:00
3377af3e22
man: fix securebits docs
2011-08-29 13:44:12 +02:00
94959f0fa0
exec: allow passing arbitrary path names to blkio cgroup attributes
...
If a device node is specified, then adjust the bandwidth/weight of it,
otherwise find the backing block device of the file system the path
refers to and adjust its bandwidth/weight.
2011-08-21 20:07:45 +02:00
9e37286844
exec: add high-level controls for blkio cgroup attributes
2011-08-21 20:07:08 +02:00
ab1f063390
exec: optionally apply cgroup attributes to the cgroups we create
2011-08-20 00:22:02 +02:00
ff01d048b4
exec: introduce PrivateNetwork= process option to turn off network access to specific services
2011-08-02 05:24:58 +02:00
260d370833
man: document that we default to 022 as umask
2011-08-01 22:37:45 +02:00
64747e2d4b
exec: add ControlGroupModify= switch to allow changing access mode to cgroups fs
2011-06-30 00:11:25 +02:00
5f4b19f4bc
service: check whether sysv scripts where changed
2011-06-21 19:29:45 +02:00
9f7dad774e
man: Documentation spelling fixes
2011-06-20 17:57:22 +02:00
9a66640832
exec: Fix number of unit types
...
There are four unit types mentioned in here, not three
2011-05-27 08:28:40 +02:00
6ea832a207
exec: hangup/reset/deallocate VTs in gettys
...
Explicitly disconnect all clients from a VT when a getty starts/finishes
(requires TIOCVHANGUP, available in 2.6.29).
Explicitly deallocate getty VTs in order to flush scrollback buffer.
Explicitly reset terminals to a defined state before spawning getty.
2011-05-18 01:07:36 +02:00
3d57c6ab80
exec: support unlimited resources
2011-04-04 18:15:13 +02:00
260abb780a
exec: properly apply capability bounding set, add inverted bounding sets
2011-03-18 04:52:45 +01:00
f1779fd27b
man: document changed EnvironmentFile= behaviour
2011-03-04 14:13:47 +01:00
48c4fad950
man: fixed typo in SyslogIdentifier=
2011-02-19 14:32:44 +01:00
28dbc1e80b
execute: optionally forward program output to /dev/console in addition to syslog/kmsg
2011-02-15 01:27:53 +01:00
2292707df5
man: document missing KillSignal= and swap options
2011-01-18 00:40:10 +01:00
afe4bfe2c1
fragment: allow prefixing of the EnvironmentFile= path with - to ignore errors
2011-01-06 01:39:08 +01:00
5471472d44
man: remaining spelling fixes
2011-01-01 20:03:56 +01:00
f8553ccbb3
man: Fix various typos
2010-11-11 14:24:47 +01:00
169c1bda80
service: optionally, create INIT_PROCESS/DEAD_PROCESS entries for a service
...
This should fix accounting for pam_limits and suchlike.
https://bugzilla.redhat.com/show_bug.cgi?id=636036
2010-10-08 16:07:50 +02:00
96d4ce0110
man: Fix small typo: s/seperate/separate/
2010-09-06 03:13:14 +02:00
dd6c17b159
exec: replace OOMAdjust= by OOMScoreAdjust= to follow new kernel interface
...
This replaces OOMAdjust= by OOMScoreAdjust= in the config files,
breaking compatibility with older unit files. However, this keeps compat
with older kernels which lack the new OOM rework.
2010-08-31 01:33:43 +02:00
ad678a066b
man: minor edits to daemon, sd_listen_fds, sd_notify, systemctl, systemd.exec, systemd, and systemd.timer pages
...
Just some minor grammar fixes.
2010-07-07 03:40:12 +02:00
f3e219a238
update man pages for recent changes
2010-07-07 01:38:56 +02:00
7492290434
turn negative options into positive options
2010-07-05 01:08:13 +02:00
03fae01822
uniformly suffix time span properties with their unit
2010-07-04 21:12:10 +02:00
dd1eb43ba7
man: document execution context related settings
2010-07-02 23:24:38 +02:00
Lennart Poettering