3 Commits

Include renames

Author	SHA1	Message	Date
Lennart Poettering	8168aca9fb	units: tag more units correctly with varlink xattrs ... These were added in parallel to #42454, hence catch up and add missing xattrs. Follow-up for 53fc4c48e7	2026-06-24 11:47:28 +01:00
Lennart Poettering	53fc4c48e7	units: tag all .varlink sockets with the right xattrs ... This also relaxes the inode access modes a bit, in case they were set to 0600: we now set the "r" bit too, i.e. use 0644. This is beneficial since it permits unpriv code to read the xattrs of the entrypoints (which require read access). Note that in order to be able to connect() to a socket inode you need write access, hence this shouldn't compromise security in any way.	2026-06-23 23:10:01 +02:00
Paul Meyer	f3818538fa	report: add systemd-report-sign-tsm backend ... A report signing backend that returns a confidential-computing attestation report obtained via configfs-tsm. Implements io.systemd.Report.Signer.Sign(): embeds the digest as the report's inblob and returns the outblob (plus provider and any aux/manifest blobs). Wired up as the "tsm" mechanism with a socket-activated service. Signed-off-by: Paul Meyer <katexochen0@gmail.com>	2026-06-22 20:42:35 +02:00