Sangjung Woo 5dfcb8d200 units: add 'SmackFileSystemRoot=*' option into tmp.mount ...

If SMACK is enabled, 'smackfsroot=*' option should be specified when
/tmp is mounted since many non-root processes use /tmp for temporary
usage. If not, /tmp is labeled as '_' and smack denial occurs when
writing.

In order to do that, 'SmackFileSystemRoot=*' is newly added into
tmp.mount.

2015-10-24 20:54:21 +09:00

..

user

unit: remove [Install] section from the user exit.target unit

2015-10-14 16:25:23 +02:00

.gitignore

units: .gitignore: units - ignore tmp.mount

2015-10-15 19:28:07 +02:00

basic.target

units: explicitly require /var, /tmp and /var/tmp to be mounted before basic.target

2015-04-03 14:32:32 +02:00

bluetooth.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

busnames.target

units: install busnames.target by default

2013-12-03 01:18:26 +01:00

console-getty.service.m4.in

console-getty.service: don't start when /dev/console is missing

2015-03-17 12:40:56 +01:00

console-shell.service.m4.in

build-sys: lookup for sulogin, it might not be in /sbin

2015-01-23 19:09:37 +01:00

container-getty@.service.m4.in

units: fix all TTY paths for container gettys

2015-01-27 14:31:44 +01:00

cryptsetup-pre.target

cryptsetup: introduce new cryptsetup-pre.traget unit so that services can make sure they are started before and stopped after any LUKS setup

2014-06-18 00:09:46 +02:00

cryptsetup.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

debug-shell.service.in

debug-shell: add condition for tty device to run on

2014-06-12 22:26:43 +02:00

dev-hugepages.mount

units: skip mounting /dev/hugepages if we don't have CAP_SYS_ADMIN

2014-12-04 02:43:02 +01:00

dev-mqueue.mount

units: add reference to new wiki page to all api mount units

2013-01-15 18:14:13 +01:00

emergency.service.in

units: emergency.service: wait for plymouth to shut down

2015-07-10 05:43:52 +02:00

emergency.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

exit.target

containers: systemd exits with non-zero code

2015-09-21 17:32:45 +02:00

final.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

getty.target

unit: link up getty configuration from man page and unit files

2012-11-20 20:10:30 +01:00

getty@.service.m4

install: introduce new DefaultInstance= field for [Install] sections

2014-06-17 02:43:43 +02:00

graphical.target

units: make graphical.target dependencies more complete and similar to those of multi-user.target

2014-12-29 17:00:05 +01:00

halt-local.service.in

build-sys: make rc-local support part of SYSV compat

2013-01-04 23:26:20 +01:00

halt.target

units: rename halt/hibernate/kexec/poweroff/reboot/suspend to systed-xxx

2012-06-25 14:28:50 +02:00

hibernate.target

unit: rename BindTo= to BindsTo=

2012-07-13 23:34:40 +02:00

hybrid-sleep.target

logind: support for hybrid sleep (i.e. suspend+hibernate at the same time)

2012-10-28 00:50:35 +02:00

initrd-cleanup.service.in

core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable

2013-11-26 02:26:31 +01:00

initrd-fs.target

core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable

2013-11-26 02:26:31 +01:00

initrd-parse-etc.service.in

initrd-parse-etc.service: ignore return code of daemon-reload

2014-09-03 13:28:31 +02:00

initrd-root-fs.target

core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable

2013-11-26 02:26:31 +01:00

initrd-switch-root.service.in

core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable

2013-11-26 02:26:31 +01:00

initrd-switch-root.target

Make initrd.target the default target in the initrd

2013-03-15 00:49:37 +01:00

initrd-udevadm-cleanup-db.service.in

Move udevadm to rootbindir

2013-03-11 07:18:33 +01:00

initrd.target

core: replace OnFailureIsolate= setting by a more generic OnFailureJobMode= setting and make use of it where applicable

2013-11-26 02:26:31 +01:00

kexec.target

units: rename halt/hibernate/kexec/poweroff/reboot/suspend to systed-xxx

2012-06-25 14:28:50 +02:00

kmod-static-nodes.service.in

units: conditionalize static device node logic on CAP_SYS_MODULES instead of CAP_MKNOD

2014-07-04 03:24:41 +02:00

ldconfig.service

units: run ldconfig also when cache is unpopulated

2015-09-23 19:27:45 +02:00

local-fs-pre.target

units: disallow manual starting of passive units

2013-03-26 15:15:39 +01:00

local-fs.target

units: local-fs.target - don't pull in default dependencies

2014-06-29 16:20:33 +02:00

machine.slice

logind: add infrastructure to keep track of machines, and move to slices

2013-06-20 03:49:59 +02:00

machines.target

units: rework systemd-nspawn@.service unit

2014-12-29 17:00:05 +01:00

Makefile

build-sys: add small redirecting Makefiles to simplify compilation from within emacs

2010-05-17 01:44:03 +02:00

multi-user.target

units: drop [Install] section from multi-user.target and graphical.target

2014-01-17 20:27:35 +01:00

network-online.target

units: order network-online.target after network.target

2014-06-11 15:00:45 +02:00

network-pre.target

units: introduce network-pre.target as place to hook in firewalls

2014-06-11 12:14:55 +02:00

network.target

units: introduce network-pre.target as place to hook in firewalls

2014-06-11 12:14:55 +02:00

nss-lookup.target

units: disallow manual starting of passive units

2013-03-26 15:15:39 +01:00

nss-user-lookup.target

units: disallow manual starting of passive units

2013-03-26 15:15:39 +01:00

org.freedesktop.hostname1.busname

units: remove "AllowUser=root own", the bus owner can always own names

2014-03-08 19:38:06 +01:00

org.freedesktop.import1.busname

import: introduce new mini-daemon systemd-importd, and make machinectl a client to it

2015-01-22 04:02:07 +01:00

org.freedesktop.locale1.busname

units: remove "AllowUser=root own", the bus owner can always own names

2014-03-08 19:38:06 +01:00

org.freedesktop.login1.busname

units: remove "AllowUser=root own", the bus owner can always own names

2014-03-08 19:38:06 +01:00

org.freedesktop.machine1.busname

units: remove "AllowUser=root own", the bus owner can always own names

2014-03-08 19:38:06 +01:00

org.freedesktop.network1.busname

units: networkd - fix busname to work on kdbus

2015-02-06 12:12:13 +01:00

org.freedesktop.resolve1.busname

units: make resolved pull in its own .busname unit, but only on kdbus systems

2015-01-07 23:44:08 +01:00

org.freedesktop.systemd1.busname

units: improve Description= for systemd's own busname unit

2015-01-07 23:44:08 +01:00

org.freedesktop.timedate1.busname

units: remove "AllowUser=root own", the bus owner can always own names

2014-03-08 19:38:06 +01:00

paths.target

units: introduce new timers.target and paths.target to hook timer/path units into for boot

2013-03-25 21:28:30 +01:00

poweroff.target

units: restore job timeouts for poweroff and reboot

2014-11-06 08:17:45 -05:00

printer.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

proc-sys-fs-binfmt_misc.automount

units: add reference to new wiki page to all api mount units

2013-01-15 18:14:13 +01:00

proc-sys-fs-binfmt_misc.mount

units: add reference to new wiki page to all api mount units

2013-01-15 18:14:13 +01:00

quotaon.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

rc-local.service.in

rc-local: drop SysVStartPriority= field which is now obsolete

2014-12-02 13:23:04 +01:00

reboot.target

units: restore job timeouts for poweroff and reboot

2014-11-06 08:17:45 -05:00

remote-fs-pre.target

units: disallow manual starting of passive units

2013-03-26 15:15:39 +01:00

remote-fs.target

filesystem targets: disable default dependencies

2013-09-11 14:40:58 +02:00

rescue.service.in

Use "new" --job-mode= option in more places

2015-05-18 01:08:09 -04:00

rescue.target

rescue: don't pull in sockets

2012-05-22 16:12:25 +02:00

rpcbind.target

units: disallow manual starting of passive units

2013-03-26 15:15:39 +01:00

serial-getty@.service.m4

units/serial-getty@.service: use the default RestartSec

2014-07-15 23:51:10 -04:00

shutdown.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

sigpwr.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

sleep.target

units: stop sleep.target when it has done its job

2012-06-25 12:01:09 +02:00

slices.target

core: general cgroup rework

2013-06-27 04:17:34 +02:00

smartcard.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

sockets.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

sound.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

suspend.target

unit: rename BindTo= to BindsTo=

2012-07-13 23:34:40 +02:00

swap.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

sys-fs-fuse-connections.mount

units: add reference to new wiki page to all api mount units

2013-01-15 18:14:13 +01:00

sys-kernel-config.mount

units: conditionalize configfs and debugfs with CAP_SYS_RAWIO

2014-07-04 03:24:42 +02:00

sys-kernel-debug.mount

units: conditionalize configfs and debugfs with CAP_SYS_RAWIO

2014-07-04 03:24:42 +02:00

sysinit.target

units: remove RefuseManualStart from units which are always around

2014-06-28 00:06:30 -04:00

syslog.socket

service: ignore dependencies on $syslog and $local_fs in LSB scripts

2013-01-16 21:34:09 +01:00

system-update.target

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

system.slice

core: general cgroup rework

2013-06-27 04:17:34 +02:00

systemd-ask-password-console.path

units: introduce new timers.target and paths.target to hook timer/path units into for boot

2013-03-25 21:28:30 +01:00

systemd-ask-password-console.service.in

units: run systemd-ask-password-console.service after systemd-vconsole-setup.service

2013-03-06 15:39:37 +01:00

systemd-ask-password-wall.path

units: introduce new timers.target and paths.target to hook timer/path units into for boot

2013-03-25 21:28:30 +01:00

systemd-ask-password-wall.service.in

units: automatically respawn the core services

2012-06-28 12:18:04 +02:00

systemd-backlight@.service.in

units: so far we defaulted to 90s as default timeout for most things, let's do so for our oneshot services too

2015-02-02 21:34:32 +01:00

systemd-binfmt.service.in

units: specify timeouts for more oneshot services

2015-04-28 08:52:17 -04:00

systemd-bootchart.service.in

bootchart: add standalone bootchart service

2014-12-04 01:55:01 +01:00

systemd-bus-proxyd.service.m4.in

bus-proxy: increase NOFILE limit

2015-09-04 11:13:32 +02:00

systemd-bus-proxyd.socket

bus-proxy: turn into multi-threaded daemon

2015-01-17 14:00:19 +01:00

systemd-exit.service.in

containers: systemd exits with non-zero code

2015-09-21 17:32:45 +02:00

systemd-firstboot.service.in

units: run firstboot before sysusers, so that firstboot can initialize the root password

2014-10-23 01:24:59 +02:00

systemd-fsck-root.service.in

fsck: remove fsckd again, but keep the door open for external replacement

2015-04-28 17:30:00 +02:00

systemd-fsck@.service.in

fsck: remove fsckd again, but keep the door open for external replacement

2015-04-28 17:30:00 +02:00

systemd-halt.service.in

man: document systemd-halt.service and friends

2012-06-26 17:50:29 +02:00

systemd-hibernate-resume@.service.in

systemd-hibernate-resume@.service: remove unnecessary ordering

2014-10-09 23:53:15 -04:00

systemd-hibernate.service.in

man: document systemd-suspend.service

2012-06-26 17:33:11 +02:00

systemd-hostnamed.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-hwdb-update.service.in

Revert "hwdb: actually search /run/udev/hwdb.d"

2015-06-09 11:26:06 +02:00

systemd-hybrid-sleep.service.in

logind: support for hybrid sleep (i.e. suspend+hibernate at the same time)

2012-10-28 00:50:35 +02:00

systemd-importd.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-initctl.service.in

man: document systemd-initctl

2012-06-26 00:15:59 +02:00

systemd-initctl.socket

initctl: move /dev/initctl fifo into /run, replace it by symlink

2014-06-04 16:53:58 +02:00

systemd-journal-catalog-update.service.in

units: so far we defaulted to 90s as default timeout for most things, let's do so for our oneshot services too

2015-02-02 21:34:32 +01:00

systemd-journal-flush.service.in

units: so far we defaulted to 90s as default timeout for most things, let's do so for our oneshot services too

2015-02-02 21:34:32 +01:00

systemd-journal-gatewayd.service.in

Revert "units: add SecureBits"

2015-02-11 18:28:06 +01:00

systemd-journal-gatewayd.socket

journal: add minimal journal gateway daemon based on GNU libmicrohttpd

2012-09-28 00:55:24 +02:00

systemd-journal-remote.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-journal-remote.socket

journal-remote: add units and read certs from default locations

2014-07-15 22:23:49 -04:00

systemd-journal-upload.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-journald-audit.socket

units: conditionalize audit multicast socket on CAP_AUDIT_READ

2015-05-20 17:40:05 +02:00

systemd-journald-dev-log.socket

journald: also increase the SendBuffer of /dev/log to 8M

2014-08-13 18:53:05 +02:00

systemd-journald.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-journald.socket

journald: move /dev/log socket to /run

2014-06-04 16:53:58 +02:00

systemd-kexec.service.in

man: document systemd-halt.service and friends

2012-06-26 17:50:29 +02:00

systemd-localed.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-logind.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-machine-id-commit.service.in

machine-id-commit: merge machine-id-commit functionality into machine-id-setup

2015-09-29 21:55:51 +02:00

systemd-machined.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-modules-load.service.in

units: specify timeouts for more oneshot services

2015-04-28 08:52:17 -04:00

systemd-networkd-wait-online.service.in

units: networkd - don't order wait-online.service before network.target

2014-06-30 13:06:33 +02:00

systemd-networkd.service.m4.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-networkd.socket

unit: give systemd-networkd.socket a better description

2015-10-06 11:52:48 +02:00

systemd-nspawn@.service.in

units: also whitelist "blkext" block devices for nspawn service

2015-10-22 01:59:25 +02:00

systemd-poweroff.service.in

man: document systemd-halt.service and friends

2012-06-26 17:50:29 +02:00

systemd-quotacheck.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

systemd-random-seed.service.in

units: specify timeouts for more oneshot services

2015-04-28 08:52:17 -04:00

systemd-reboot.service.in

man: document systemd-halt.service and friends

2012-06-26 17:50:29 +02:00

systemd-remount-fs.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

systemd-resolved.service.m4.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-rfkill.service.in

rfkill: rework and make it listen on /dev/rfkill

2015-10-01 16:21:09 +02:00

systemd-rfkill.socket

rfkill: rework and make it listen on /dev/rfkill

2015-10-01 16:21:09 +02:00

systemd-suspend.service.in

man: document systemd-suspend.service

2012-06-26 17:33:11 +02:00

systemd-sysctl.service.in

units: specify timeouts for more oneshot services

2015-04-28 08:52:17 -04:00

systemd-sysusers.service.in

units: specify timeouts for more oneshot services

2015-04-28 08:52:17 -04:00

systemd-timedated.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-timesyncd.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-tmpfiles-clean.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

systemd-tmpfiles-clean.timer

man: link systemd-tmpfiles-setup-dev.service

2013-04-23 12:55:44 +02:00

systemd-tmpfiles-setup-dev.service.in

units: tmpfiles-setup-dev - allow unsafe file creation to happen in /dev at boot

2014-10-27 17:40:24 +01:00

systemd-tmpfiles-setup.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

systemd-udev-settle.service.in

udev: replace CAP_MKNOD by writable /sys condition

2013-08-17 19:07:42 +02:00

systemd-udev-trigger.service.in

units: move After=systemd-hwdb-update.service dependency from udev to udev-trigger

2015-04-03 14:27:16 +02:00

systemd-udevd-control.socket

udev: replace CAP_MKNOD by writable /sys condition

2013-08-17 19:07:42 +02:00

systemd-udevd-kernel.socket

units: make ReceiveBuffer= line more readable by using M suffix

2014-11-03 21:51:28 +01:00

systemd-udevd.service.in

units: increase watchdog timeout to 3min for all our services

2015-09-29 21:55:51 +02:00

systemd-update-done.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

systemd-update-utmp-runlevel.service.in

utmp: turn systemd-update-utmp-shutdown.service into a normal runtime service

2013-05-16 00:19:03 +02:00

systemd-update-utmp.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

systemd-user-sessions.service.in

units: explicitly order systemd-user-sessions.service after nss-user-lookup.target

2015-04-03 14:31:35 +02:00

systemd-vconsole-setup.service.in

readahead: wipe out readahead

2014-09-25 16:39:18 +02:00

time-sync.target

units: time-sync.target probably makes sense, is not just sysv compat

2014-06-11 12:14:55 +02:00

timers.target

unit: do not order timers.target before basic.target

2014-11-02 12:33:54 -05:00

tmp.mount.m4

units: add 'SmackFileSystemRoot=*' option into tmp.mount

2015-10-24 20:54:21 +09:00

umount.target

units: introduce new Documentation= field and make use of it everywhere

2012-05-21 15:14:51 +02:00

user.slice

logind: add infrastructure to keep track of machines, and move to slices

2013-06-20 03:49:59 +02:00

user@.service.m4.in

build-sys: remove commented-out m4 from user@.service

2014-12-14 12:54:16 -05:00

var-lib-machines.mount

units: add missing unit file

2015-02-24 18:46:49 +01:00

x-.slice

build-sys: work around automake issue with files with a leading '-'

2013-07-02 23:15:49 -04:00