Commit graph

40 commits

Author SHA1 Message Date
Lennart Poettering 4ef3108288 selinux: mount /sys, /proc, /dev before we load the SELinux policy 2011-07-29 01:49:46 +02:00
Lennart Poettering 0b3325e79e selinux: use setcon() instead of reexec to apply selinux policy 2011-07-28 23:52:23 +02:00
Kay Sievers fbe092cc70 mount /run without MS_NOEXEC 2011-06-14 14:15:40 +02:00
Michal Schmidt ef9d7dca54 selinux: selinuxfs can be mounted on /sys/fs/selinux
The kernel now provides the /sys/fs/selinux mountpoint and libselinux
prefers it if it's available.

systemd currently tests only for /selinux and this leads to an infinite
loop of policy reloads in the latest Rawhide.

Fix it by checking both possible mountpoints.
Also add the new path to ignore_paths[].

/selinux appears also in nspawn.c. I don't think it's necessary to
change it there at this point.

https://bugzilla.redhat.com/show_bug.cgi?id=711015
2011-06-07 00:53:39 +02:00
Lennart Poettering 016e9849e0 mount: failure to mount cgroup hierarchies should not be fatal
If we cannot open /etc/cgroup, print an error message, but go on, to
support cgroup-less builds.

https://bugzilla.redhat.com/show_bug.cgi?id=628004
2011-04-26 21:12:38 +02:00
Tollef Fog Heen 3a90ae0482 manager: mkdir /run/systemd/system when starting up 2011-04-23 22:06:18 +02:00
Wulf C. Krueger af49ec2c7d mount: Allow creating mount units for /var/lib/nfs/rpc_pipefs and /proc/fs/nfsd.
Mounting /var/lib/nfs/rpc_pipefs and /proc/fs/nfsd is required by rpcbind
and the NFS server respectively. To depend on them being mounted, systemd
needs to be allowed to create mount units for both in order to avoid having
to implement hacks (mounting in ExecStartPre or using shell scripts).
2011-04-20 22:52:10 +02:00
Lennart Poettering e5a53dc746 cgroup: be nice to Ingo Molnar
https://bugzilla.redhat.com/show_bug.cgi?id=628004
2011-04-12 22:16:02 +02:00
Lennart Poettering 0e456f9781 path: optionally, create watched directories in .path units 2011-04-10 01:30:14 +02:00
Lennart Poettering f1d19aa412 manager: no need to use randomized generator dir when running as system manager 2011-04-07 21:22:41 +02:00
Lennart Poettering 20c03b7be2 don't make up buffer sizes, use standard LINE_MAX instead 2011-04-07 18:48:50 +02:00
Lennart Poettering 51b4af2c28 mount: relabel both before and after a mount, just in case 2011-04-06 23:38:01 +02:00
Lennart Poettering 3bbecb2f2c selinux: relabel /run the same way as /dev after loading the policy since they both come pre-filled and unlabelled 2011-04-04 16:58:23 +02:00
Lennart Poettering 43515ba0ce mount: also relabel pre-mounted API dirs 2011-03-31 21:40:10 +02:00
Kay Sievers 2b583ce657 use /run instead of /dev/.run
Instead of the /dev/.run trick we have currently implemented, we decided
to move the early-boot runtime dir to /run.

An existing /var/run directory is bind-mounted to /run. If /var/run is
already a symlink, no action is taken.

An existing /var/lock directory is bind-mounted to /run/lock.
If /var/lock is already a symlink, no action is taken.

To implement the directory vs. symlink logic, we have a:
  ConditionPathIsDirectory=
now, which is used in the mount units.

Skipped mount unit in case of symlink:
  $ systemctl status var-run.mount
  var-run.mount - Runtime Directory
    Loaded: loaded (/lib/systemd/system/var-run.mount)
    Active: inactive (dead)
            start condition failed at Fri, 25 Mar 2011 04:51:41 +0100; 6min ago
     Where: /var/run
      What: /run
    CGroup: name=systemd:/system/var-run.mount

The systemd rpm needs to make sure to add something like:
  %pre
  mkdir -p -m0755 /run >/dev/null 2>&1 || :
or it needs to be added to filesystem.rpm.

Udev -git already uses /run if that exists, and is writable at bootup.
Otherwise it falls back to the current /dev/.udev.

Dracut and plymouth need to be adopted to switch from /dev/.run to run
too.

Cheers,
Kay
2011-03-28 23:00:00 +02:00
Lennart Poettering b925e72633 dev: use /dev/.run/systemd as runtime directory, instead of /dev/.systemd 2011-03-09 22:45:47 +01:00
Lennart Poettering 34df5a34e1 drop unnecessary suffix NULs as gcc adds them anyway 2011-03-09 19:48:02 +01:00
Lennart Poettering cc5524ecc6 mount: use /dev/.run as an early boot alias for /var/run
During early boot, mount a tmpfs to /dev/.run and then bind mount it to
/var/run as soon as /var is available.

This makes it possible for programs involved in early boot to put
runtime data in /dev/.run which later on will show up in /var/run like
any other.

This can be used to solve the early-boot D-Bus problem: D-Bus may start
up with its socket bound to /dev/.run/dbus/system_bus_socket and after
/var it will also be available under the traditional name
/var/run/dbus/system_bus_socket.

This also is intended to be used as a better place for systemd, mount,
mdadm, blkid, plymouth, bootchart and dracut runtime data, which is
currently stored in various places in /dev/.xxx.
2011-03-09 02:51:45 +01:00
Lennart Poettering c904f64d84 label: udev might be making changes in /dev while we iterate through it
Also, there are most likely dead symlinks in there, so let's ignore
ENOENT when we relabel.

https://bugzilla.redhat.com/show_bug.cgi?id=680169
2011-02-25 01:47:31 +01:00
Lennart Poettering bef2733fae mount-setup: mount /dev/pts with mode=620,gid=5 by default and make GID overridable via configure switch 2011-01-04 01:58:38 +01:00
Lennart Poettering 501c875bff mount-setup: drop noexec flag from default mount options for /dev/shm
We shouldn't break PROT_EXEC which is a valid mmap() flag.
2010-12-23 22:33:24 +01:00
Lennart Poettering 46ff0ed7b0 mount: trivial typo fix 2010-11-24 22:28:28 +01:00
Kay Sievers 16f6682d0b mount_cgroup_controllers: expect 2 items from fscanf() 2010-11-22 11:06:38 +01:00
Lennart Poettering 600a328fc2 mount: do not try to mount disable cgroup controllers
https://bugzilla.redhat.com/show_bug.cgi?id=655222
2010-11-21 22:29:10 +01:00
Lennart Poettering 40f9afa721 mount: trivial optimization 2010-11-18 19:23:17 +01:00
Lennart Poettering 9fe117ea5a mount: don't relabel /dev twice in a row 2010-11-12 00:40:26 +01:00
Kay Sievers 57f2a956e6 split mount_point_is_api() and mount_point_ignore()
We should not handle the ignore list as API mounts, as
systemd itself never touches them.

On Thu, Nov 11, 2010 at 10:34, Andreas Jaeger <aj@novell.com> wrote:
>
> I noticed for some time that systemd-remount-api-vfs is in the
> failed state and found now the following in the log files
>
> systemd-remount-api-vfs[467]: /bin/mount for /proc/bus/usb exited with exit status 32.
> systemd-remount-api-vfs[467]: mount: /proc/bus/usb not mounted already, or bad option
> systemd[1]: systemd-remount-api-vfs.service: main process exited, code=exited, status=1
> systemd[1]: Unit systemd-remount-api-vfs.service entered failed state.
2010-11-11 11:15:16 +01:00
Lennart Poettering 1829dc9dc5 selinux: relabel /dev after loading policy 2010-11-10 22:38:43 +01:00
Lennart Poettering 5c0532d1cc mounts: automatically create /dev/stderr and friends early on boot so that they are around when we run shell scripts before udevd 2010-10-27 05:47:48 +02:00
Lennart Poettering 5275d3c13d mount-setup: fix selinux label after mounting
rhbz 629268
2010-09-15 01:38:07 +02:00
Lennart Poettering 77d5f105bf cgroup: mount cgroup file systems to /sys/fs/cgroup instead of /cgroup
This requires the /sys/fs/cgroup to exist. Current git kernels have
this, released kernels need a backport of a single patch.
2010-08-25 04:58:24 +02:00
Lennart Poettering 449ddb2d23 remount: add tool that applies /etc/fstab mount options to all api mounts 2010-08-20 03:26:15 +02:00
Lennart Poettering d6c9574fb5 emacs: make sure nobody accidently adds tabs to our sources 2010-08-14 19:59:25 +02:00
Robert "arachnist" Gerus 28322e1eb6 sshd, tmux and others are broken when /dev/pts is mounted with "-o nodev" 2010-07-23 05:12:13 +02:00
Lennart Poettering 949c651032 mount-setup: consider a few file systems API mounts and ignore them 2010-07-16 02:56:57 +02:00
Lennart Poettering f5644ae461 mounts: reindent table 2010-06-02 21:15:27 +02:00
Lennart Poettering 122c1c8198 mounts: make /cgroup a tmpfs file system 2010-06-02 21:05:23 +02:00
Lennart Poettering 670802d4b1 units: replace a few non-essential API mounts with automount units 2010-05-18 03:10:17 +02:00
Lennart Poettering 53f7d807bf cgroup: don't require debug cgroup controller anymore, use name hierarchy instead 2010-05-17 23:54:44 +02:00
Lennart Poettering e99e38bbdc build-sys: move source files to subdirectory 2010-05-16 18:45:24 +02:00
Renamed from mount-setup.c (Browse further)