dilim/systemd

mirror of https://github.com/systemd/systemd.git synced 2026-07-24 16:25:52 +00:00

Go to file

Anita Zhang 4c1567f29a bpf-firewall: optimization for IPAddressXYZ="any" (and unprivileged users)

This is a workaround to make IPAddressDeny=any/IPAddressAllow=any work
for non-root users that have CAP_NET_ADMIN. "any" was chosen since
all or nothing network access is one of the most common use cases for
isolation.

Allocating BPF LPM TRIE maps require CAP_SYS_ADMIN while BPF_PROG_TYPE_CGROUP_SKB
only needs CAP_NET_ADMIN. In the case of IPAddressXYZ="any" we can just
consistently return false/true to avoid allocating the map and limit the user
to having CAP_NET_ADMIN.

2019-06-22 19:56:06 +02:00

.github/ISSUE_TEMPLATE

docs: move markdown docs from .github/ to docs/

2018-09-08 13:39:03 -07:00

.lgtm/cpp-queries

lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC]

2019-04-10 20:03:38 +02:00

mkosi: update to Fedora30 (#12642 )

2019-05-23 09:39:07 +02:00

po: minor fixes to Italian translation (#12500 )

2019-05-09 20:50:18 +02:00

Use sd_event_source_disable_unref()

2019-05-10 16:55:37 +02:00

docs: CGROUP_DELEGATION: fix a typo in "that"

2019-06-18 11:31:47 +09:00

man,factory: update factory config for nsswitch.conf to match the man pages

2018-11-27 22:35:02 +01:00

hwdb: add axis range corrections for the Asus N53SV

2019-05-29 12:39:11 +02:00

man: drop my copyright

2019-06-21 15:05:09 +09:00

Add SPDX license headers to various assorted files

2017-11-19 19:08:15 +01:00

udev,network: warn when .link or .network file has no [Match] section

2019-04-25 08:41:10 +02:00

tran: update Chinese (Traditional) translation to the latest. (#12662 )

2019-05-25 15:40:43 +02:00

Drop my copyright headers

2018-06-14 13:03:20 +02:00

rules: enable hardware-related targets also for user instances

2019-05-28 14:18:11 +02:00

Merge pull request #12519 from keszybz/man-on-demand

2019-05-21 08:25:26 +09:00

shell-completion

resolved: add strict mode for DNS-over-TLS

2019-06-19 13:10:44 +02:00

bpf-firewall: optimization for IPAddressXYZ="any" (and unprivileged users)

2019-06-22 19:56:06 +02:00

sysctl: bump pid range only on 64-bit systems

2019-05-20 18:13:59 +02:00

sysusers,tmpfiles: re-create systemd-network, systemd-resolve and systemd-timesync

2018-07-16 17:11:50 +02:00

test-network: change default sleep time of start_networkd()

2019-06-18 13:10:23 +09:00

coredump: fixed bug - some coredump temp files could be lost

2019-05-31 12:57:35 +02:00

Merge pull request #12510 from keszybz/test-directives

2019-05-21 08:35:10 +09:00

travis: turn on all default UBSan checks except for pointer-overflow, object-size and float-cast-overflow

2019-06-17 23:45:36 +03:00

units: deny access to block devices

2019-06-20 14:03:57 +02:00

scripts: use 4 space indentation

2019-04-12 08:30:31 +02:00

.ctags

editors: Prevent ctags from following symlinks

2019-02-15 11:01:20 -08:00

.dir-locals.el

scripts: use 4 space indentation

2019-04-12 08:30:31 +02:00

.editorconfig

scripts: use 4 space indentation

2019-04-12 08:30:31 +02:00

.gitattributes

git: indicate that tabs are never OK in the systemd tree

2013-10-30 02:25:38 +01:00

.gitignore

gitignore: add nspawn image lock and mkosi temporary files

2018-09-07 20:00:22 +02:00

.lgtm.yml

lgtm: use python3

2018-12-10 03:07:17 +09:00

.mailmap

update .mailmap

2019-04-02 17:31:00 +02:00

.travis.yml

coverity: stop setting _Float*

2019-06-21 18:27:35 +03:00

.vimrc

scripts: use 4 space indentation

2019-04-12 08:30:31 +02:00

.ycm_extra_conf.py

ycm: add doc string for all the functions in configuration file

2017-11-29 13:21:49 -07:00

azure-pipelines.yml

tests: move the FuzzBuzz stage from Travis CI to Azure Pipelines

2019-05-14 12:22:10 +02:00

configure

build-sys: add basic support for ./configure && make && make install

2017-07-18 10:05:06 -04:00

fuzz.yaml

tests: hook up fuzz targets to FuzzBuzz

2019-05-07 21:39:01 +00:00

LICENSE.GPL2

relicense to LGPLv2.1 (with exceptions)

2012-04-12 00:24:39 +02:00

LICENSE.LGPL2.1

licence: remove references to old FSF address

2012-12-17 11:41:31 +01:00

Makefile

build-sys: Fix Makefile wrapper for install target (#6548 )

2017-08-07 11:29:20 +02:00

meson_options.txt

resolved: add strict mode for DNS-over-TLS

2019-06-19 13:10:44 +02:00

meson.build

resolved: add strict mode for DNS-over-TLS

2019-06-19 13:10:44 +02:00

mkosi.build

mkosi: let's update the boot loader also in /efi

2019-03-01 12:41:32 +01:00

mkosi.default

mkosi: create .mkosi directory

2016-10-06 11:53:58 -04:00

NEWS

NEWS: add more hint about MACAddressPolicy= change

2019-06-14 16:19:14 +02:00

README

codespell: fix spelling errors

2019-04-29 16:47:18 +02:00

README.md

Continuous Fuzzing Integration with Fuzzit

2019-06-14 21:09:40 +03:00

TODO

nspawn: allocate the pty used for /dev/console within the container

2019-06-18 08:17:34 +02:00

zanata.xml

po: add basic fedora.zanata.org configuration

2018-02-19 13:56:57 +01:00

README.md

systemd - System and Service Manager

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements is provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the Hacking guide for information on how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.

Stable branches with backported patches are available in the stable repo.