SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
01e6465b558570d2e33ebeb514b39cedde96014f
systemd/src
T
History
Daan De Meyer 01e6465b55 nsresourced: Verify user namespace identity on registry lookup 
When a user namespace dies and its registry entry is torn down, the kernel
can recycle its inode number for a freshly-created namespace. A subsequent
registration or operation request can therefore find a stale registry entry
keyed by the same inode that actually belongs to a different, now-dead user
namespace.

Use NS_GET_ID to compare the kernel-assigned namespace identifier against
the stored one whenever we look up the registry from a live userns fd
(AddMount/AddControlGroup/AddNetworkInterface, plus the two registration
paths). Extract release_userns_by_info()/release_userns_by_inode() into
userns-registry.c so nsresourcework can fully clean up stale entries
(BPF allowlist, fdstore fd, cgroups, netifs, on-disk record) before reusing
the slot, and remove the now-unused userns_registry_inode_exists().

Co-developed-by: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-21 14:26:35 +00:00
..
ac-power
shared/help-util: automatically append ":" in sections
2026-05-05 11:14:33 +02:00
analyze
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
ask-password
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
backlight
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
basic
Introduce support for running code in fibers (#39771)
2026-05-21 16:21:13 +02:00
battery-check
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
binfmt
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
bless-boot
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
boot
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
bootctl
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
bpf
Various dlopen/linking cleanups from #42100 (#42166)
2026-05-19 08:54:27 +02:00
busctl
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
cgls
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
cgtop
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
core
core: add FileDescriptorStorePreserve=on-success option (#42160)
2026-05-21 12:08:33 +01:00
coredump
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
coverage
…
creds
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
cryptenroll
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
cryptsetup
cryptsetup: dlopen libcryptsetup in tokens
2026-05-18 21:17:38 +00:00
debug-generator
debug-generator: assert breakpoint type is valid before bit shift
2026-04-12 13:25:28 +01:00
delta
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
detect-virt
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
dissect
dissect: convert the other parser to option macros
2026-05-16 18:36:08 +02:00
environment-d-generator
…
escape
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
factory-reset
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
firstboot
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
fsck
stat-util: also introduce stat_verify_block() and use it everywhere
2026-04-13 13:20:43 +02:00
fstab-generator
fstab-generator: fix spurious quota warning for xfs
2026-05-19 13:12:43 +01:00
fundamental
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
fuzz
fuzz-bootspec: apply "ruff format"
2026-05-18 02:44:46 +09:00
getty-generator
…
gpt-auto-generator
gpt-auto-generator: do not fail on missing libcryptsetup when verity
2026-04-23 11:45:22 +02:00
growfs
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
hibernate-resume
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
home
firstboot: make clear where the full screen console wizards end
2026-05-21 09:09:38 +09:00
hostname
tree-wide: use device_get_sysattr_safe_string()
2026-05-18 02:55:56 +09:00
hwdb
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
id128
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
imds
curl-util: bring CurlGlue/CurlSlot in line with sd-bus and qmp-client
2026-05-08 16:52:57 +02:00
import
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
include
Introduce support for running code in fibers (#39771)
2026-05-21 16:21:13 +02:00
integritysetup
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
journal
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
journal-remote
Various dlopen/linking cleanups from #42100 (#42166)
2026-05-19 08:54:27 +02:00
kernel-install
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
keyutil
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
libc
musl: drop renameat2() wrapper
2026-05-21 05:06:35 +09:00
libsystemd
sd-dhcp-relay: reimplement DHCP relay agent and drop legacy DHCP relay mode from sd-dhcp-server (#42130)
2026-05-21 16:23:44 +02:00
libsystemd-network
sd-dhcp-server: drop legacy DHCP relay mode
2026-05-21 16:55:59 +09:00
libudev
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
locale
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
login
logind: keep lingering users at startup-time GC
2026-05-21 08:53:07 +01:00
machine
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
machine-id-setup
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
measure
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
modules-load
cpu-set-util: introduce cpus_online().
2026-05-14 08:12:28 +02:00
mount
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
mountfsd
Improve error logging for fstat failure
2026-04-30 08:05:54 +02:00
mstack
mstack-tool: convert to OPTION macros
2026-05-05 13:49:51 +02:00
mute-console
bootctl,mute-console,pcrextend,pcrlock,repart: allow connections from self
2026-05-05 17:23:16 +02:00
network
sd-dhcp-relay: reimplement DHCP relay agent and drop legacy DHCP relay mode from sd-dhcp-server (#42130)
2026-05-21 16:23:44 +02:00
notify
shared/help-util: automatically append ":" in sections
2026-05-05 11:14:33 +02:00
nspawn
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
nsresourced
nsresourced: Verify user namespace identity on registry lookup
2026-05-21 14:26:35 +00:00
nss-myhostname
nss-myhostname: fix maybe-uninitialized warning
2026-04-24 16:45:19 +01:00
nss-mymachines
…
nss-resolve
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
nss-systemd
nss-systemd: fix off-by-one in nss_pack_group_record_shadow()
2026-04-12 21:20:15 +01:00
oom
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
path
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
pcrextend
bootctl,mute-console,pcrextend,pcrlock,repart: allow connections from self
2026-05-05 17:23:16 +02:00
pcrlock
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
portable
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
pstore
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
ptyfwd
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
quotacheck
…
random-seed
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
remount-fs
…
repart
repart: canonicalize node in varlink Run method
2026-05-20 16:22:00 +02:00
reply-password
…
report
report: use new --help formatting calls
2026-05-21 09:05:26 +09:00
resolve
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
rfkill
tree-wide: use device_get_sysattr_safe_string()
2026-05-18 02:55:56 +09:00
rpm
…
run
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
run-generator
…
sbsign
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
shared
Introduce support for running code in fibers (#39771)
2026-05-21 16:21:13 +02:00
shutdown
shutdown: prepare LUO session for FD Stores before kexec
2026-05-15 13:46:08 +01:00
sleep
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
socket-activate
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
socket-proxy
socket-proxy: implement PROXY protocol v1
2026-05-20 04:29:59 +09:00
ssh-generator
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
stdio-bridge
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
storage
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
storagetm
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
sulogin-shell
…
sysctl
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
sysext
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
sysinstall
firstboot: make clear where the full screen console wizards end
2026-05-21 09:09:38 +09:00
system-update-generator
…
systemctl
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
systemd
sd-dhcp-relay: reimplement DHCP relay agent and drop legacy DHCP relay mode from sd-dhcp-server (#42130)
2026-05-21 16:23:44 +02:00
sysupdate
updatectl: Apply --no-ask-password argument to polkit agent
2026-05-21 14:54:36 +02:00
sysusers
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
test
Introduce support for running code in fibers (#39771)
2026-05-21 16:21:13 +02:00
timedate
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
timesync
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
tmpfiles
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
tpm2-setup
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
tty-ask-password-agent
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
udev
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
ukify
test-ukify: Skip kernel images we can't access
2026-05-20 16:04:26 +00:00
update-done
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
update-utmp
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
user-sessions
…
userdb
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
validatefs
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
varlinkctl
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
vconsole
vconsole-util: move code to read EFI keyboard layout into generic code
2026-05-20 16:34:21 +02:00
veritysetup
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
version
bpf: move all programs into src/bpf/ and consolidate meson logic
2026-04-22 16:49:36 +02:00
vmspawn
vmspawn: move --kernel=/--initrd= under the "Execution" section
2026-05-20 23:39:47 +02:00
volatile-root
…
vpick
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
xdg-autostart-generator
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00