picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Ninjatrappeur's systemd working tree
28,694 Commits 2 Branches 0 Tags 166 MiB
C 87.3%
Python 6.2%
Shell 2%
C++ 1.4%
Meson 1.2%
Other 1.8%
Go to file
Zbigniew Jędrzejewski-Szmek 5a664ca10f rules: add a rule to set /dev/kvm access mode and ownership (#5597) 
Kernel default mode is 0600, but distributions change it to group kvm, mode
either 0660 (e.g. Debian) or 0666 (e.g. Fedora). Both approaches have valid
reasons (a stricter mode limits exposure to bugs in the kvm subsystem, a looser
mode makes libvirt and other virtualization mechanisms work out of the box for
unprivileged users over ssh).

In Fedora the qemu package carries the relevant rule, but it's nicer to have it
in systemd, so that the permissions are not dependent on the qemu package being
installed. Use of packaged qemu binaries is not required to make use of
/dev/kvm, e.g. it's possible to use a self-compiled qemu or some alternative.

https://bugzilla.redhat.com/show_bug.cgi?id=1431876

To accomodate both approaches, add a rule to set the mode in 50-udev-default.rules,
but allow the mode to be overridden with a --with-dev-kvm-mode configure rule.
The default is 0660, as the (slightly) more secure option.
 		2017-03-27 12:34:24 +02:00
.github docs: use https in the mailing list url 2017-03-07 12:33:51 -03:00
.mkosi Merge pull request #4879 from poettering/systemd 2017-01-14 21:29:27 -05:00
catalog catalog: use https:// in URLs 2017-02-21 18:21:13 +01:00
coccinelle tree-wide: drop NULL sentinel from strjoin 2016-10-23 11:43:27 -04:00
docs docs: use https:// in URLs 2017-02-21 18:18:24 +01:00
factory/etc factory: remove broken pam_limits 2014-07-30 15:21:54 +02:00
hwdb hwdb: add resolution values for Waltop USB tablet (#5634) 2017-03-26 20:00:40 -04:00
m4 build-sys: Perform flag tests in context to existing flags 2016-02-06 14:57:46 +01:00
man resolved: add global config option to control mDNS stack 2017-03-21 13:35:08 +09:00
network network: allow LLDP packets to cross non-customer bridges for container network interfaces 2016-05-09 15:45:31 +02:00
po Updated Swedish translation (#5614) 2017-03-19 23:56:34 -04:00
rules rules: add a rule to set /dev/kvm access mode and ownership (#5597) 2017-03-27 12:34:24 +02:00
shell-completion hostname: add 'convertible' chassis type 2017-02-28 11:54:52 +01:00
src units: simplify rescue.service and emergency.service (#5623) 2017-03-22 23:37:06 -04:00
sysctl.d sysctl.d: replace URL of SysRq key documentation (#5274) 2017-02-08 19:42:43 +01:00
system-preset unit: drop console-shell.service (#4298) (#4325) 2016-10-10 12:06:26 +02:00
sysusers.d rules: add a rule to set /dev/kvm access mode and ownership (#5597) 2017-03-27 12:34:24 +02:00
test test-journal-importer: add a test case with broken input 2017-02-15 00:31:55 -05:00
tmpfiles.d tmpfiles.d: set primary group rights to r-w (#5265) 2017-02-07 18:56:55 -05:00
tools tools/catalog-report.py: a script to scour the journal for bad catalog entries 2016-12-11 15:43:16 -05:00
units units: simplify rescue.service and emergency.service (#5623) 2017-03-22 23:37:06 -04:00
xorg login: support user-bus on dbus1 2015-08-31 18:12:37 +02:00
.dir-locals.el editors: only extend line width to 119 for C and XML files 2016-02-10 12:29:32 +01:00
.editorconfig editors: only extend line width to 119 for C and XML files 2016-02-10 12:29:32 +01:00
.gitattributes git: indicate that tabs are never OK in the systemd tree 2013-10-30 02:25:38 +01:00
.gitignore Merge pull request #5131 from keszybz/environment-generators 2017-02-21 11:11:44 +01:00
.mailmap update NEWS for v233 (#5503) 2017-03-01 11:21:29 -05:00
.travis.yml remove gudev and gtk-doc 2015-06-03 00:22:53 +02:00
.vimrc vimrc: fix indentation logic for our docbook xml files 2016-04-29 12:23:34 +02:00
.ycm_extra_conf.py ycm: update flag blacklist 2014-06-04 15:41:10 -04:00
CODING_STYLE tree-wide: set SA_RESTART for signal handlers we install 2016-12-01 12:41:17 +01:00
DISTRO_PORTING It's now ok to use Google NTP servers (#5311) 2017-02-12 00:30:40 -05:00
ENVIRONMENT.md Rename $TEST_DIR to $SYSTEMD_TEST_DATA, document it 2017-02-16 21:36:31 +01:00
HACKING HACKING: mkosi is now packaged for Fedora 2017-02-14 23:56:48 -05:00
LICENSE.GPL2 relicense to LGPLv2.1 (with exceptions) 2012-04-12 00:24:39 +02:00
LICENSE.LGPL2.1 licence: remove references to old FSF address 2012-12-17 11:41:31 +01:00
Makefile-man.am Merge pull request #5131 from keszybz/environment-generators 2017-02-21 11:11:44 +01:00
Makefile.am rules: add a rule to set /dev/kvm access mode and ownership (#5597) 2017-03-27 12:34:24 +02:00
NEWS NEWS: fix word (#5514) 2017-03-01 19:08:32 -05:00
README Avoid strict DM interface version dependencies (#5519) 2017-03-02 19:11:37 +01:00
README.md README: include small graphs of open issues and pull requests (#5576) 2017-03-13 08:10:04 +01:00
TODO update TODO 2017-02-28 17:22:14 +01:00
autogen.sh build-sys/autogen: don't use bashisms (#4489) 2016-10-25 19:39:48 -04:00
configure.ac rules: add a rule to set /dev/kvm access mode and ownership (#5597) 2017-03-27 12:34:24 +02:00
mkosi.build mkosi: change /etc/issue text a bit for mkosi images build from systemd tree 2016-12-14 18:29:30 +01:00
mkosi.default mkosi: create .mkosi directory 2016-10-06 11:53:58 -04:00

README.md

systemd - System and Service Manager

Count of open issues over time Count of open pull requests over time Build Status
Coverity Scan Status

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements are provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the HACKING file for information how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.