Luca Boccassi cafe40ec82 executor: check for all permission related errnos when setting up IPC namespace ...

Denials from AppArmor are raised as EACCES, so EPERM is not enough. Do
the same check as PrivateNetwork above.

Fixes https://github.com/systemd/systemd/issues/31037

Related to 06384eb3c5

2024-05-27 10:58:15 +02:00

..

bpf

bpf-socket-bind: fix unexpected behavior with either 0 allow or deny rules

2024-03-24 11:08:58 +00:00

all-units.h

…

apparmor-setup.c

…

apparmor-setup.h

…

audit-fd.c

…

audit-fd.h

…

automount.c

core: align table

2024-03-29 13:51:15 +09:00

automount.h

…

bpf-devices.c

bpf-devices: if a device node is referenced which doesn't exist, downgrade log message

2024-02-09 15:32:10 +01:00

bpf-devices.h

cgroup: turn device cgroup controller "rwm" strings into proper flags

2023-10-17 23:27:01 +01:00

bpf-firewall.c

tree-wide: make sure net/if.h is included before any linux/ header

2024-04-09 21:19:15 +02:00

bpf-firewall.h

…

bpf-foreign.c

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

bpf-foreign.h

…

bpf-restrict-fs.c

tree-wise: several cleanups for logging

2024-05-01 04:41:06 +09:00

bpf-restrict-fs.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

bpf-restrict-ifaces.c

cgroup: typo fix initial_restric_ifaces_link_fds → initial_restrict_ifaces_link_fds

2024-02-19 19:18:21 +01:00

bpf-restrict-ifaces.h

core: rename restrict-ifaces.[ch] → bpf-restrict-ifaces.[ch]

2024-01-25 16:11:33 +01:00

bpf-socket-bind.c

bpf-socket-bind: fix unexpected behavior with either 0 allow or deny rules

2024-03-24 11:08:58 +00:00

bpf-socket-bind.h

bpf-socket-bind: rename bpf_serialize_socket_bind() → bpf_socket_bind_serialize()

2024-01-25 16:11:33 +01:00

bpf-util.c

tree-wise: several cleanups for logging

2024-05-01 04:41:06 +09:00

bpf-util.h

…

cgroup.c

cgroup-util: allow cg_read_pid() to skip unmapped (zero) pids

2024-05-14 16:12:20 +02:00

cgroup.h

core/cgroup: introduce MemoryZSwapWriteback setting

2024-03-13 23:36:25 +00:00

core-varlink.c

core/varlink: make manager_setup_varlink_server static

2024-05-15 00:46:06 +08:00

core-varlink.h

core/varlink: make manager_setup_varlink_server static

2024-05-15 00:46:06 +08:00

crash-handler.c

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

crash-handler.h

…

dbus-automount.c

…

dbus-automount.h

…

dbus-cgroup.c

core/cgroup: introduce MemoryZSwapWriteback setting

2024-03-13 23:36:25 +00:00

dbus-cgroup.h

…

dbus-device.c

…

dbus-device.h

…

dbus-execute.c

core/dbus-execute: don't trigger assertion if WorkingDirectory="" or "-"

2024-05-26 13:40:48 +08:00

dbus-execute.h

manager: switch service unit type over to using new handoff timestamping logic

2024-04-25 13:40:41 +02:00

dbus-job.c

core: switch j->unit->manager to j->manager

2024-04-18 20:25:39 +08:00

dbus-job.h

…

dbus-kill.c

…

dbus-kill.h

…

dbus-manager.c

manager: resolve verb/noun mixup in log message

2024-05-07 09:42:47 +02:00

dbus-manager.h

…

dbus-mount.c

tree-wide: insert missing space after comma

2024-04-13 05:44:04 +09:00

dbus-mount.h

…

dbus-path.c

tree-wide: add path_simplify_alloc() and use it

2023-09-22 08:13:34 +02:00

dbus-path.h

…

dbus-scope.c

tree-wide: port various things over to new pidref helpers

2024-01-29 14:42:59 +01:00

dbus-scope.h

…

dbus-service.c

tree-wide: be more careful when passing literal integers to "t" bus message fields

2024-02-22 04:31:50 +09:00

dbus-service.h

…

dbus-slice.c

…

dbus-slice.h

…

dbus-socket.c

socket: pass socket FDs to all ExecXYZ= commands but ExecStartPre=

2024-03-27 01:41:26 +08:00

dbus-socket.h

…

dbus-swap.c

swap: Move two functions to swap.h

2023-10-20 14:09:32 +02:00

dbus-swap.h

…

dbus-target.c

…

dbus-target.h

…

dbus-timer.c

timer: Add two more helper functions

2023-10-20 14:09:32 +02:00

dbus-timer.h

…

dbus-unit.c

cgroup-util: allow cg_read_pid() to skip unmapped (zero) pids

2024-05-14 16:12:20 +02:00

dbus-unit.h

…

dbus-util.c

reboot-util: Add some basic validation on reboot arguments

2024-05-02 00:52:06 +09:00

dbus-util.h

reboot-util: Add some basic validation on reboot arguments

2024-05-02 00:52:06 +09:00

dbus.c

core/dbus: modernize bus_foreach_bus

2024-04-19 10:08:35 +08:00

dbus.h

…

device.c

tree-wide: refuse enumerated device with ID_PROCESSING=1

2024-04-05 01:49:20 +09:00

device.h

…

dynamic-user.c

core: silence gcc warning about unitialized variable

2024-04-07 11:15:19 +02:00

dynamic-user.h

exec-invoke: don't double-close FDs on error

2023-10-28 16:56:25 +02:00

efi-random.c

…

efi-random.h

…

emergency-action.c

core: refuse invalid emergency actions for SuccessAction= and friends in user service manager

2024-05-18 02:51:34 +09:00

emergency-action.h

core: refuse invalid emergency actions for SuccessAction= and friends in user service manager

2024-05-18 02:51:34 +09:00

exec-credential.c

core/exec-credential: downgrade warning about missing cred to debug

2024-05-14 20:13:57 +02:00

exec-credential.h

core: introduce exec_params_need_credentials

2024-02-07 00:43:33 +08:00

exec-invoke.c

executor: check for all permission related errnos when setting up IPC namespace

2024-05-27 10:58:15 +02:00

exec-invoke.h

core: move code from execute.c to exec-invoke.c

2023-10-12 15:01:51 +01:00

execute-serialize.c

core/execute: switch mount_apivfs to tristate

2024-04-27 14:30:29 +08:00

execute-serialize.h

core: add serialization/deserialization for CGroupContext

2023-10-12 14:57:38 +01:00

execute.c

core,vconsole-setup: treat locking failure as non-fatal

2024-05-14 23:22:41 +02:00

execute.h

core/execute: do not use format str for log_object_internal

2024-05-17 15:15:21 +02:00

executor.c

core/execute: clean up log_exec_full_errno and friends

2024-02-19 23:12:59 +08:00

fuzz-execute-serialize.c

bpf-restrict-fs: also rename functions to bpf_restrict_fs_xyz()

2024-01-25 16:11:33 +01:00

fuzz-manager-serialize.c

fuzz: unify logging setup

2023-10-19 10:05:20 +01:00

fuzz-manager-serialize.options

fuzz: limit size for fuzz-manager-serialize

2023-10-02 14:23:34 +01:00

fuzz-unit-file.c

fuzz: unify logging setup

2023-10-19 10:05:20 +01:00

fuzz-unit-file.options

…

generator-setup.c

…

generator-setup.h

…

ima-setup.c

…

ima-setup.h

…

import-creds.c

core: Fix assertion in parse_smbios_strings()

2024-05-15 13:30:35 +02:00

import-creds.h

…

job.c

core: switch j->unit->manager to j->manager

2024-04-18 20:25:39 +08:00

job.h

core: Fail to start/stop/reload unit if frozen

2024-01-30 11:18:16 -05:00

kill.c

…

kill.h

…

kmod-setup.c

use FOREACH_ELEMENT

2024-04-18 17:39:34 +02:00

kmod-setup.h

…

load-dropin.c

…

load-dropin.h

…

load-fragment-gperf-nulstr.awk

…

load-fragment-gperf.gperf.in

reboot-util: Add some basic validation on reboot arguments

2024-05-02 00:52:06 +09:00

load-fragment.c

core/load-fragment: also clear missing_ok when WorkingDirectory=""

2024-05-26 13:40:48 +08:00

load-fragment.h

reboot-util: Add some basic validation on reboot arguments

2024-05-02 00:52:06 +09:00

main.c

main: pass the right error variable

2024-05-07 13:18:10 +02:00

main.h

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

manager-dump.c

meson: Start adding devel and rc suffixes to the project version

2024-02-14 15:36:34 +01:00

manager-dump.h

core: dump jobs list on sigrtmin+18 with 0x500

2023-09-11 12:24:23 +01:00

manager-serialize.c

core/manager-serialize: deserialize handoff-timestamp fds

2024-04-27 14:30:29 +08:00

manager-serialize.h

…

manager.c

core: Skip private /tmp for generators in manager test runs

2024-05-16 10:17:00 +02:00

manager.h

manager: add socket for receiving handoff timestamps from forked children

2024-04-25 13:33:03 +02:00

meson.build

core: drop unused param, move taint calculation to separate file

2024-04-24 15:17:49 +02:00

mount.c

core/mount: correctly set DefaultDependencies=no for mounts from mountinfo

2024-05-15 22:02:32 +08:00

mount.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

namespace.c

core/namespace: take char* const* for strv, use FOREACH_ARRAY

2024-05-09 17:02:19 +08:00

namespace.h

namespace: make setup_namespace() less crazy

2023-10-11 12:39:30 +09:00

org.freedesktop.systemd1.conf

…

org.freedesktop.systemd1.policy.in

…

org.freedesktop.systemd1.service

…

path.c

core: use ASSERT_PTR(CAST(u)) everywhere

2024-03-22 01:36:37 +08:00

path.h

…

scope.c

core: Serialize both pid and pidfd

2024-04-10 09:32:04 +02:00

scope.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

selinux-access.c

core/selinux-access: use empty_to_na where appropriate

2024-05-02 13:36:52 +08:00

selinux-access.h

…

selinux-setup.c

Journal: Add message IDs for emergency-level log messages

2023-09-01 13:59:21 +01:00

selinux-setup.h

…

service.c

core/service: remove unnecessary reset of notify_access_override

2024-05-14 00:49:59 +08:00

service.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

show-status.c

core: Check for TERM=dumb in show_status()

2024-04-22 13:27:27 +02:00

show-status.h

…

slice.c

core: use log_unit_debug in *_set_state

2024-04-07 10:20:39 +01:00

slice.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

smack-setup.c

Journal: Add message IDs for emergency-level log messages

2023-09-01 13:59:21 +01:00

smack-setup.h

…

socket.c

socket: hookup handoff timestamps with processes forked off by socket units

2024-04-25 13:40:41 +02:00

socket.h

socket: pass socket FDs to all ExecXYZ= commands but ExecStartPre=

2024-03-27 01:41:26 +08:00

swap.c

core/swap: rename variable 'new' -> 'new_unit'

2024-05-15 21:54:21 +08:00

swap.h

core: split out cgroup specific state fields from Unit → CGroupRuntime

2024-02-16 10:17:40 +01:00

system.conf.in

core: Add systemd.crash_action= kernel command line argument

2024-04-29 14:34:22 +02:00

systemd.pc.in

systemd.pc: Keep support for rootprefix and root_prefix (#30115)

2023-11-21 12:51:08 +00:00

taint.c

core/taint: make short_uid_range() not take a path

2024-04-24 15:17:49 +02:00

taint.h

core: drop unused param, move taint calculation to separate file

2024-04-24 15:17:49 +02:00

target.c

core: use FOREACH_ARRAY at 3 more places

2024-04-10 23:40:53 +08:00

target.h

…

timer.c

core: align table

2024-03-29 13:51:15 +09:00

timer.h

timer: Add two more helper functions

2023-10-20 14:09:32 +02:00

transaction.c

tree-wide: 'allows to' -> 'allows one to'

2024-05-14 18:33:27 +02:00

transaction.h

…

unit-dependency-atom.c

…

unit-dependency-atom.h

…

unit-printf.c

core: use strdup_to()

2024-03-20 15:18:21 +01:00

unit-printf.h

…

unit-serialize.c

manager: use proper unicode arrow in dump

2024-04-24 16:15:53 +02:00

unit-serialize.h

core: add serialization/deserialization for ExecContext

2023-10-12 14:56:23 +01:00

unit.c

core: introduce unit_verify_contexts

2024-05-26 13:41:43 +08:00

unit.h

manager: add socket for receiving handoff timestamps from forked children

2024-04-25 13:33:03 +02:00

user.conf.in

config files: update their header to reflect that they can be installed in /usr

2023-09-21 18:54:39 +02:00