Daan De Meyer 9dcd9ffd89 core: add IOUringFilter= ...

SystemCallFilter= can allow or deny io_uring as a whole, but not
individual io_uring operations. It only denies an operation together with
the system calls that the operation can do the work of. Some operations,
such as IORING_OP_URING_CMD, which passes commands to drivers, or the
zero-copy network operations, can thus only be denied together with
ioctl() or the socket calls.

Let's add IOUringFilter=, which takes an allow or deny list of io_uring
operations, like SystemCallFilter= does for system calls. On kernels
without io_uring BPF filters, we can't enforce IOUringFilter=, so we deny
io_uring_setup() with ENOSYS instead. Programs fall back to regular
system calls when io_uring_setup() fails with ENOSYS.

2026-11-04 10:54:29 +01:00

..

_data

docs: update external links

2026-01-31 01:11:11 +09:00

_includes

docs: update footer to 2026

2026-04-14 17:32:37 +01:00

_layouts

…

assets

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

fonts

…

var-log

meson: install README.logs independently of HAVE_SYSV_COMPAT

2024-11-29 14:18:15 +01:00

_config.yml

…

.gitattributes

…

.gitignore

…

API_FILE_SYSTEMS.md

docs: update external links

2026-01-31 01:11:11 +09:00

APPSTREAM_BUNDLE.md

…

ARCHITECTURE.md

rust: bind only the headers Rust code uses

2026-10-25 17:27:54 +01:00

AUTOMATIC_BOOT_ASSESSMENT.md

docs: update external links

2026-01-31 01:11:11 +09:00

BACKPORTS.md

docs/BACKPORTS: update

2025-11-12 23:01:35 +00:00

BLOCK_DEVICE_LOCKING.md

docs: update external links

2026-01-31 01:11:11 +09:00

BOOT_LOADER_INTERFACE.md

boot: add support for installing fwupd capsules

2026-11-02 11:07:30 +01:00

BOOT_LOADER_SPECIFICATION.md

…

BOOT.md

systemd-boot: add a preferred setting that's similar to default but avoids booting known-bad entries

2026-02-18 03:28:12 +09:00

BUILDING_IMAGES.md

docs: update external links

2026-01-31 01:11:11 +09:00

CATALOG.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

CGROUP_DELEGATION.md

docs: Document manual cgroup controller management for Delegate=yes

2025-04-25 00:42:24 +01:00

CODE_OF_CONDUCT.md

…

CODE_QUALITY.md

ci: Drop codeql workflow

2026-03-24 17:55:26 +01:00

CODING_STYLE.md

CODING_STYLE: drop obsolete advice

2026-11-02 22:59:36 +01:00

CONTAINER_INTERFACE.md

docs: fix capability name, it's CAP_MKNOD not CAP_SYS_MKNOD (#41621)

2026-04-13 16:41:33 +01:00

CONTRIBUTING.md

CONTRIBUTING: Add template for LLM violation

2026-10-27 16:58:05 -04:00

CONTROL_GROUP_INTERFACE.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

CONVERTING_TO_HOMED.md

docs: update external links

2026-01-31 01:11:11 +09:00

COREDUMP_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

COREDUMP.md

docs: update external links

2026-01-31 01:11:11 +09:00

CREDENTIALS.md

condition: make ConditionCredential= also search the credential stores

2026-10-20 06:55:47 +02:00

DAEMON_SOCKET_ACTIVATION.md

…

DEBUGGING.md

docs: update external links

2026-01-31 01:11:11 +09:00

DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

DISCOVERABLE_PARTITIONS.md

…

DISK-QUOTAS-PROJECTIDS.md

core: add quota support for State, Cache, and Log exec directories

2025-07-07 17:28:47 +00:00

DISTRO_PORTING.md

docs: update external links

2026-01-31 01:11:11 +09:00

ELF_DLOPEN_METADATA.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

ELF_PACKAGE_METADATA.md

docs: rename COREDUMP_PACKAGE_METADATA → ELF_PACKAGE_METADATA

2024-12-19 15:35:55 +01:00

ENVIRONMENT.md

sd-event: add futures backed by io_uring SQEs

2026-11-02 13:29:09 +01:00

FACTORY_RESET.md

man,docs: document EFI variable erasing on factory reset

2026-10-29 19:53:35 +01:00

FAQ.md

docs: update external links

2026-01-31 01:11:11 +09:00

favicon.png

…

favicon.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

FILE_DESCRIPTOR_STORE.md

core: add FDSTOREWIPE notify message to wipe FD store

2026-10-31 10:20:30 +00:00

GOVERNANCE.md

Move subsystem maintainers to CODEOWNERS

2026-10-02 14:58:43 +02:00

GROUP_RECORD.md

docs: punctuation and a typo

2025-05-14 18:06:04 +02:00

HACKING.md

mkosi: share packaging pins with other build tools

2026-10-30 13:20:54 +01:00

HOME_DIRECTORY.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

INCOMPATIBILITIES.md

docs/INCOMPATIBILITIES: fix typo

2026-02-09 02:36:50 +01:00

index.md

Drop remaining references about sysv script support

2026-01-16 22:56:08 +09:00

INHIBITOR_LOCKS.md

docs/INHIBITOR_LOCKS: Update sentence for the new mode added

2026-06-06 13:44:49 +01:00

INITRD_INTERFACE.md

…

JOURNAL_EXPORT_FORMATS.md

docs: document control codepoints correctly

2026-10-27 16:00:46 +09:00

JOURNAL_FILE_FORMAT.md

docs: wrap bare enum constants in inline code in JOURNAL_FILE_FORMAT

2026-03-12 09:37:24 +01:00

JOURNAL_NATIVE_PROTOCOL.md

docs: update external links

2026-01-31 01:11:11 +09:00

LABELS.md

docs: Add doc for describing the meaning of github labels

2026-10-02 14:56:31 +02:00

MEMORY_PRESSURE.md

docs: Update MEMORY_PRESSURE.md => PRESSURE.md

2026-04-09 22:47:10 +02:00

MINIMAL_BUILDS.md

tree-wide: drop unused libcap dependencies

2025-10-24 01:52:59 +09:00

MOUNT_REQUIREMENTS.md

docs/MOUNT_REQUIREMENTS: fix typo

2025-11-25 22:52:10 +09:00

MY_SERVICE_CANT_GET_REALTIME.md

docs: update external links

2026-01-31 01:11:11 +09:00

NETWORK_ONLINE.md

docs: update external links

2026-01-31 01:11:11 +09:00

OPTIMIZATIONS.md

docs: fix stale links

2026-10-05 09:35:58 +02:00

OSC_CONTEXT.md

docs: add redirection of the osc context to uapi website

2025-12-18 10:50:23 +01:00

PACKAGE_METADATA_FOR_EXECUTABLE_FILES.md

docs: elf metadata specs have moved to uapi-group

2025-11-19 20:00:25 +01:00

PASSWORD_AGENTS.md

docs/PASSWORD_AGENTS: document the AcceptCached= field

2025-12-31 10:59:41 -05:00

PAX_CONTROL_GROUPS.md

docs: fix multiple grammar errors

2026-01-29 00:40:18 +09:00

PORTABILITY_AND_STABILITY.md

NEWS, docs: document SD_VARLINK_EXPERIMENTAL

2026-10-19 11:28:33 +02:00

PORTABLE_SERVICES.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

PORTING_TO_NEW_ARCHITECTURES.md

docs: reference UAPI specs by their number when linked

2025-11-23 17:16:09 +01:00

PREDICTABLE_INTERFACE_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESET.md

docs: update external links

2026-01-31 01:11:11 +09:00

PRESSURE.md

docs: Update memory pressure docs for latest GLib support for it

2026-07-02 15:05:14 +01:00

RANDOM_SEEDS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

RELEASE.md

mkosi: share packaging pins with other build tools

2026-10-30 13:20:54 +01:00

RESOLVED-VPNS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

ROOT_STORAGE_DAEMONS.md

docs: fix SurviveFinalKillSignal typo

2025-07-22 18:03:39 +01:00

ROOTFS_DISCOVERY.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

rootfs-discovery-flow.svg

Switch back to 'http' in SVG files (#40661)

2026-02-12 17:49:19 +00:00

SECURITY.md

docs: say that the github form is preferred for security vulnerabilities

2026-06-01 15:06:20 +01:00

SEPARATE_USR_IS_BROKEN.md

…

style.css

docs: contain image sizing and prevent overflow on mobile

2026-03-12 09:38:03 +01:00

SYSLOG.md

docs: update external links

2026-01-31 01:11:11 +09:00

SYSTEMD_FILE_HIERARCHY_REQUIREMENTS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

sysupdate-objects.svg

docs: Add a diagram for the internals of sysupdate

2026-01-30 13:19:33 +09:00

TEMPORARY_DIRECTORIES.md

docs: update external links

2026-01-31 01:11:11 +09:00

TESTING_WITH_SANITIZERS.md

docs: fix mkosi section for Environment= setting

2025-04-16 08:30:25 +09:00

THE_CASE_FOR_THE_USR_MERGE.md

docs: update external links

2026-01-31 01:11:11 +09:00

TIPS_AND_TRICKS.md

…

TPM2_NVINDEX_ASSIGNMENTS.md

docs: two follow-ups for NV Index registry commit

2026-10-16 09:16:07 +02:00

TPM2_PCR_MEASUREMENTS.md

boot: set LoaderPcrSMBIOS only if all structures were measured

2026-10-29 13:02:45 +01:00

TRANSIENT-SETTINGS.md

core: add IOUringFilter=

2026-11-04 10:54:29 +01:00

TRANSLATORS.md

…

UIDS-GIDS.md

nsresourced: Optionally map foreign UID range

2026-02-24 18:29:37 +01:00

USER_GROUP_API.md

userdb: suppress lookups outside of indicated ranges

2026-07-12 23:09:01 +02:00

USER_NAMES.md

docs: update external links

2026-01-31 01:11:11 +09:00

USER_RECORD_BLOB_DIRS.md

…

USER_RECORD.md

Fix typos in USER_RECORD.md documentation

2026-08-16 10:25:33 +01:00

USERDB_AND_DESKTOPS.md

docs: update external links

2026-01-31 01:11:11 +09:00

VARLINK.md

NEWS, docs: document SD_VARLINK_EXPERIMENTAL

2026-10-19 11:28:33 +02:00

VM_INTERFACE.md

…

WRITING_DESKTOP_ENVIRONMENTS.md

docs: update external links

2026-01-31 01:11:11 +09:00

WRITING_DISPLAY_MANAGERS.md

docs: fix typo

2026-09-22 18:46:41 +02:00

WRITING_NETWORK_CONFIGURATION_MANAGERS.md

…

WRITING_RESOLVER_CLIENTS.md

docs: fix typos and grammar in various documents

2026-09-17 11:49:45 +09:00

WRITING_VM_AND_CONTAINER_MANAGERS.md

docs: fix misleading VM/machined documentation

2026-04-02 12:55:33 +02:00