fork/systemd.git - Gentoo mirror of systemd with backported commits

	Commit message (Expand)	Author	Age	Files	Lines
*	man: fix typos (#5109)	Jakub Wilk	2017-01-19	1	-1/+1
*	Merge pull request #4991 from poettering/seccomp-fix	Zbigniew Jędrzejewski-Szmek	2017-01-17	1	-0/+8
\|\
\| *	seccomp: add two new filter sets: @reboot and @swap	Lennart Poettering	2016-12-27	1	-0/+8
* \|	Merge pull request #5009 from ian-kelling/ian-mnt-namespace-doc	Zbigniew Jędrzejewski-Szmek	2017-01-11	1	-1/+5
\|\ \
\| * \|	man: document mount deletion between commands	Ian Kelling	2017-01-03	1	-1/+5
* \| \|	doc: MountFlags= don't reference container which may not exist (#5011)	Ian Kelling	2017-01-03	1	-3/+3
* \| \|	doc: correct "or" to "and" in MountFlags= description (#5010)	Ian Kelling	2017-01-03	1	-1/+1
\|/ /
* \|	Merge pull request #4994 from poettering/private-tmp-tmpfiles	Martin Pitt	2016-12-29	1	-6/+9
\|\ \
\| * \|	core: implicitly order units with PrivateTmp= after systemd-tmpfiles-setup.se...	Lennart Poettering	2016-12-27	1	-6/+9
\| \|/
* /	man: add brief documentation for the (sd-pam) processes created due to PAMNam...	Lennart Poettering	2016-12-29	1	-8/+11
\|/
*	core: add ability to define arbitrary bind mounts for services	Lennart Poettering	2016-12-14	1	-0/+25
*	man: fix $SERVICE_RESULT/$EXIT_CODE/$EXIT_STATUS documentation	Jouke Witteveen	2016-12-06	1	-3/+12
*	bus-util: add protocol error type explanation	Jouke Witteveen	2016-11-29	1	-3/+3
*	man: document protocol error type for service failures (#4724)	Jouke Witteveen	2016-11-23	1	-8/+9
*	seccomp: add @filesystem syscall group (#4537)	Lennart Poettering	2016-11-21	1	-0/+4
*	namespace: simplify, optimize and extend handling of mounts for namespace	Lennart Poettering	2016-11-17	1	-7/+13
*	doc: move ProtectKernelModules= documentation near ProtectKernelTunalbes=	Djalal Harouni	2016-11-15	1	-24/+24
*	doc: note when no new privileges is implied	Djalal Harouni	2016-11-15	1	-8/+28
*	core: add new RestrictNamespaces= unit file setting	Lennart Poettering	2016-11-04	1	-16/+34
*	Merge pull request #4548 from keszybz/seccomp-help	Zbigniew Jędrzejewski-Szmek	2016-11-03	1	-5/+11
\|\
\| *	seccomp-util, analyze: export comments as a help string	Zbigniew Jędrzejewski-Szmek	2016-11-03	1	-3/+3
\| *	analyze: add syscall-filter verb	Zbigniew Jędrzejewski-Szmek	2016-11-03	1	-2/+8
* \|	doc: clarify NoNewPrivileges (#4562)	Kees Cook	2016-11-03	1	-4/+4
\|/
*	man: document that too strict system call filters may affect the service manager	Lennart Poettering	2016-11-02	1	-0/+8
*	seccomp: add two new syscall groups	Lennart Poettering	2016-11-02	1	-0/+8
*	man: two minor fixes	Lennart Poettering	2016-11-02	1	-2/+2
*	seccomp: include pipes and memfd in @ipc	Lennart Poettering	2016-11-02	1	-1/+1
*	seccomp: drop execve() from @process list	Lennart Poettering	2016-11-02	1	-1/+1
*	seccomp: add clock query and sleeping syscalls to "@default" group	Lennart Poettering	2016-11-02	1	-24/+14
*	seccomp: allow specifying arm64, mips, ppc (#4491)	Zbigniew Jędrzejewski-Szmek	2016-11-01	1	-22/+19
*	man: fix typos (#4527)	Jakub Wilk	2016-10-31	1	-2/+2
*	Merge pull request #4495 from topimiettinen/block-shmat-exec	Djalal Harouni	2016-10-28	1	-4/+7
\|\
\| *	seccomp: also block shmat(..., SHM_EXEC) for MemoryDenyWriteExecute	Topi Miettinen	2016-10-26	1	-4/+7
* \|	man: document the default value of NoNewPrivileges=	Zbigniew Jędrzejewski-Szmek	2016-10-24	1	-7/+16
\|/
*	man: document default for User=	Lennart Poettering	2016-10-20	1	-2/+7
*	core/exec: add a named-descriptor option ("fd") for streams (#4179)	Luca Bruno	2016-10-17	1	-6/+40
*	man: avoid abbreviated "cgroups" terminology (#4396)	Lennart Poettering	2016-10-17	1	-2/+1
*	man: add crosslink between systemd.resource-control(5) and systemd.exec(5)	Zbigniew Jędrzejewski-Szmek	2016-10-15	1	-0/+5
*	Merge pull request #4243 from endocode/djalal/sandbox-first-protection-kernel...	Lennart Poettering	2016-10-13	1	-3/+26
\|\
\| *	core:sandbox: lets make /lib/modules/ inaccessible on ProtectKernelModules=	Djalal Harouni	2016-10-12	1	-1/+4
\| *	doc: minor hint about InaccessiblePaths= in regard of ProtectKernelTunables=	Djalal Harouni	2016-10-12	1	-1/+4
\| *	core:sandbox: remove CAP_SYS_RAWIO on PrivateDevices=yes	Djalal Harouni	2016-10-12	1	-2/+2
\| *	core:sandbox: Add ProtectKernelModules= option	Djalal Harouni	2016-10-12	1	-0/+17
* \|	man: typo fixes	Thomas Hindoe Paaboel Andersen	2016-10-12	1	-2/+2
\|/
*	Merge pull request #4348 from poettering/docfixes	Zbigniew Jędrzejewski-Szmek	2016-10-11	1	-2/+13
\|\
\| *	man: beef up documentation on per-unit resource limits a bit	Lennart Poettering	2016-10-11	1	-2/+13
* \|	core: add "invocation ID" concept to service manager	Lennart Poettering	2016-10-07	1	-0/+10
\|/
*	seccomp: add support for the s390 architecture (#4287)	hbrueckner	2016-10-05	1	-1/+2
*	man: remove consecutive duplicate words (#4268)	Stefan Schweter	2016-10-03	1	-1/+1
*	core: Use @raw-io syscall group to filter I/O syscalls when PrivateDevices= i...	Djalal Harouni	2016-09-25	1	-2/+4