Lennart Poettering bc9fd78c7b bus: when connecting to a container's kdbus instance, enter namespace first ... Previously we'd open the connection in the originating namespace, which meant most peers of the bus would not be able to make sense of the PID/UID/... identity of us since we didn't exist in the namespace they run in. However they require this identity for privilege decisions, hence disallowing access to anything from the host. Instead, when connecting to a container, create a temporary subprocess, make it join the container's namespace and then connect from there to the kdbus instance. This is similar to how we do it for socket conections already. THis also unifies the namespacing code used by machinectl and the bus APIs.		2013-12-14 05:10:25 +01:00
..
machine-dbus.c	bus: add new sd_bus_creds object to encapsulate process credentials	2013-11-28 18:42:18 +01:00
machine.c	machined: keep track of the initial leader PID of a machine	2013-11-06 02:31:35 +01:00
machine.h	bus: also add error parameter to object find and enumerator callbacks	2013-11-22 01:42:15 +01:00
machinectl.c	bus: when connecting to a container's kdbus instance, enter namespace first	2013-12-14 05:10:25 +01:00
machined-dbus.c	bus: introduce "trusted" bus concept and encode access control in object vtables	2013-12-10 16:52:49 +00:00
machined.c	bus: remove explicit activator-specific flags, the kdbus supports it now	2013-12-12 20:27:23 +01:00
machined.h	bus: also add error parameter to object find and enumerator callbacks	2013-11-22 01:42:15 +01:00
Makefile	machined: split out machine registration stuff from logind	2013-07-02 03:47:23 +02:00
org.freedesktop.machine1.conf	bus: introduce "trusted" bus concept and encode access control in object vtables	2013-12-10 16:52:49 +00:00
org.freedesktop.machine1.service	machined: split out machine registration stuff from logind	2013-07-02 03:47:23 +02:00
test-machine-tables.c	tests: add tests for string lookup tables	2013-07-05 01:36:16 -04:00