SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
72f3a4a73c9bd0096d7e5abebbb6274b40ec8ffa
systemd/src/core
T
History
Christian Brauner 9b62fd169e Extend W^X memory protection mechanism for RestrictFileSystemAccess (#43511) 
Currently `RestrictFileSystemAccess` isn't trying hard enough to enforce
W^X and thus there are still places where an executable and writable
mapping can be created:

* `/proc/<pid>/mem` `FOLL_FORCE` writes
* `PTRACE_POKE{TEXT,DATA}` `FOLL_FORCE` writes
* `MAP_PRIVATE | MAP_EXECUTABLE` memory mappings

Let's block all of these mechanisms. Do note that
`RestrictFileSystemAccess` is still in very active development and also
cannot meaningfully be used on general purpose distros and systems.

Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
2026-09-01 07:12:13 +02:00
..
all-units.h
…
apparmor-setup.c
clang-tidy: Fix all remaining misc-include-cleaner violations
2025-11-22 10:19:41 +01:00
apparmor-setup.h
…
audit-fd.c
…
audit-fd.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
automount.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
automount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
bpf-bind-iface.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
bpf-bind-iface.h
Add support for binding a unit to a network iface
2025-12-24 07:37:58 +01:00
bpf-devices.c
tree-wide: make more use of stat_verify_device_node()
2026-04-13 13:20:43 +02:00
bpf-devices.h
…
bpf-firewall.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
bpf-firewall.h
…
bpf-foreign.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
bpf-foreign.h
…
bpf-restrict-fs.c
core/bpf-restrict-fs: use DEFINE_TRIVIAL_CLEANUP_FUNC_FULL_RENAME macro
2026-08-01 03:23:40 +09:00
bpf-restrict-fs.h
core/bpf-restrict-fs: merge three functions
2026-08-01 03:23:21 +09:00
bpf-restrict-fsaccess.c
core: check that proc_mem.force_override=never is active
2026-08-31 23:33:40 +02:00
bpf-restrict-fsaccess.h
core: centralize RestrictFileSystemAccess= checks
2026-08-31 23:33:39 +02:00
bpf-restrict-ifaces.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
bpf-restrict-ifaces.h
…
bpf-socket-bind.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
bpf-socket-bind.h
…
cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
cgroup.h
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
clock-warp.c
…
clock-warp.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
core-forward.h
Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h
2026-07-15 02:18:05 +09:00
crash-handler.c
tree-wide: Use pidref_wait_for_terminate_and_check()
2025-12-20 15:50:47 +01:00
crash-handler.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
dbus-automount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-automount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
dbus-cgroup.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-device.c
…
dbus-device.h
…
dbus-execute.c
core/dbus-execute: propagate oom in property_get_cpu_affinity
2026-05-18 12:29:12 +02:00
dbus-execute.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-job.c
tree-wide: add missing assertions
2026-08-18 06:30:10 +09:00
dbus-job.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-kill.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-manager.c
process-util: introduce proc_get_timerslack()
2026-07-13 15:39:17 +02:00
dbus-manager.h
core/dbus-manager: drop dangling verify_run_space_and_log() prototype
2025-12-18 17:37:26 +01:00
dbus-mount.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-mount.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-path.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-path.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-scope.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
dbus-service.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-slice.c
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
dbus-slice.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-socket.c
core: fix integer truncation checks
2026-08-19 02:28:19 +09:00
dbus-socket.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-swap.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-target.c
…
dbus-target.h
…
dbus-timer.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
dbus-timer.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
dbus-unit.c
core: add method to enqueue multiple jobs in a single call
2026-06-22 13:01:17 +01:00
dbus-unit.h
core: add method to enqueue multiple jobs in a single call
2026-06-22 13:01:17 +01:00
dbus-util.c
core/dbus-util: several cleanups for bus_read_mount_options()
2026-01-19 17:49:29 +01:00
dbus-util.h
core: change mount options settings so that last defined wins
2026-01-06 17:59:10 +01:00
dbus.c
tree-wide: add missing assertions
2026-08-18 06:30:10 +09:00
dbus.h
…
device.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
device.h
…
dynamic-user.c
tree-wide: add missing assertions
2026-08-18 06:30:10 +09:00
dynamic-user.h
tree-wide: Introduce DECLARE_TRIVIAL_REF_UNREF_FUNC() and friends
2026-01-02 04:04:19 +09:00
efi-random.c
…
efi-random.h
…
emergency-action.c
core: rename and extend manager_add_job_by_name_and_warn
2026-07-02 17:19:18 +02:00
emergency-action.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
exec-credential.c
label: plumb label_context through LabelOps
2026-07-31 09:49:41 +02:00
exec-credential.h
core/exec-credential: introduce unit_refresh_credentials()
2026-02-10 21:54:12 +01:00
exec-invoke.c
core: fix error code passed to pam_syslog_pam_error()
2026-08-31 12:02:58 +02:00
exec-invoke.h
…
execute-serialize.c
core: fix bind paths whitespace parsing
2026-08-15 00:26:40 +09:00
execute-serialize.h
…
execute.c
tree-wide: add missing assertions
2026-08-18 06:30:10 +09:00
execute.h
core: add FileDescriptorStorePreserve=on-success option
2026-05-21 10:14:08 +01:00
executor.c
tree-wide: format man page references as foo(1)
2026-08-28 06:34:45 +09:00
executor.h
manager: make systemd+executor a multicall binary
2026-06-22 17:19:54 +02:00
fuzz-execute-serialize.c
core: Add UserNamespacePath=
2025-11-04 10:55:04 +01:00
fuzz-manager-serialize.c
…
fuzz-manager-serialize.options
…
fuzz-unit-file.c
…
fuzz-unit-file.options
…
generate-bpf-delegate-configs.py
ruff: use single quotes for multiline strings
2026-05-18 02:32:39 +09:00
generate-builtin-units.py
core: embed essential units as built-in fallbacks
2026-07-02 17:19:18 +02:00
generator-setup.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
generator-setup.h
tree-wide: Introduce sd-forward.h and shared-forward.h headers
2025-10-16 17:00:29 +02:00
ima-setup.c
…
ima-setup.h
…
import-creds.c
core: trust SMBIOS credentials under Intel TDX
2026-07-01 16:09:27 +02:00
import-creds.h
…
ipe-setup.c
treewide: fix typos in the entire codebase
2026-05-05 17:22:26 +02:00
ipe-setup.h
…
job.c
core: transition job to JOB_FINISHED on uninstall
2026-04-28 09:01:54 +02:00
job.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
kill.c
…
kill.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
kmod-setup.c
kmod-setup: support early loading for virtio-ccw devices
2026-08-31 19:40:33 +09:00
kmod-setup.h
…
load-dropin.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
load-dropin.h
…
load-fragment-gperf-nulstr.awk
…
load-fragment-gperf.gperf.in
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
load-fragment.c
core: fix bind paths whitespace parsing
2026-08-15 00:26:40 +09:00
load-fragment.h
core: add socket xattr settings for socket unit
2026-06-23 22:55:23 +02:00
luo.c
core: rename LUO 'kexecsCount' state field to 'KExecsCount'
2026-06-30 10:21:18 +01:00
luo.h
core: support FD Store preservation through kexec via LUO
2026-05-15 13:46:08 +01:00
main.c
tree-wide: format man page references as foo(1)
2026-08-28 06:34:45 +09:00
main.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
manager-dump.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-dump.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
manager-serialize.c
core: block PTRACE_POKE{TEXT,DATA} when RestrictFileSystemAccess= is enabled
2026-08-31 23:33:40 +02:00
manager-serialize.h
…
manager.c
core: Add SERVICE_RUNNING_REVALIDATING state
2026-09-01 02:12:52 +09:00
manager.h
core: block PTRACE_POKE{TEXT,DATA} when RestrictFileSystemAccess= is enabled
2026-08-31 23:33:40 +02:00
meson.build
meson: automate .standalone variant generation via extended 'install' field
2026-07-10 16:29:53 +09:00
mount.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
mount.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
namespace.c
label: plumb label_context through LabelOps
2026-07-31 09:49:41 +02:00
namespace.h
Add DEFINE_ARRAY_FREE_FUNC and mount_image_free_array
2026-04-10 15:08:02 +02:00
org.freedesktop.systemd1.conf
dbus: allow FreezeUnit and ThawUnit D-Bus requests (#43292)
2026-08-05 14:44:25 +01:00
org.freedesktop.systemd1.policy.in
…
org.freedesktop.systemd1.service
…
path.c
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
path.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
scope.c
core/scope: don't assert when start is retried during cgroup chown
2026-07-01 22:46:45 +01:00
scope.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
selinux-access.c
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-access.h
core: Rename error sd_bus_error parameters to reterr_error
2025-11-26 16:22:50 +09:00
selinux-setup.c
tree-wide: drop DLOPEN_FOO() macros
2026-07-18 04:56:32 +09:00
selinux-setup.h
core: Only build selinux-setup if we have selinux
2026-03-20 21:38:08 +01:00
service.c
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
service.h
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
show-status.c
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
show-status.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
slice.c
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
slice.h
Add ActivatingConcurrencyMax for slice startup pacing
2026-08-03 14:29:07 +09:00
smack-setup.c
core: make check-pointer-deref clean
2026-03-30 14:18:56 +02:00
smack-setup.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
socket.c
label: plumb label_context through LabelOps
2026-07-31 09:49:41 +02:00
socket.h
core: add socket xattr settings for socket unit
2026-06-23 22:55:23 +02:00
swap.c
core: when figuring out whether to create orphanage units, consult vtable instead of allowlist
2026-05-13 22:44:52 +01:00
swap.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
system.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
systemd.pc.in
…
taint.c
…
taint.h
…
target.c
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
target.h
…
timer.c
core/timer: fix next trigger with RandomizedOffsetSec + Persistent (#42826)
2026-08-01 00:53:33 +09:00
timer.h
string-table: Introduce DECLARE_STRING_TABLE_LOOKUP() and friends
2026-01-02 04:05:45 +09:00
transaction.c
core: fix assertion when inactive unit pulled in by try-restart and start at the same time
2026-06-23 17:36:03 +01:00
transaction.h
core: add method to enqueue multiple jobs in a single call
2026-06-22 13:01:17 +01:00
unit-dependency-atom.c
…
unit-dependency-atom.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
unit-printf.c
many: fix remaining check-pointer-deref issues
2026-04-12 15:27:15 +02:00
unit-printf.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit-serialize.c
core: when skipping state deserializing units, also skip job subsections
2026-05-06 12:04:51 +01:00
unit-serialize.h
tree-wide: Fix declaration/definition parameter name mismatches
2025-11-26 19:02:31 +09:00
unit.c
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
unit.h
core: Don't racily stop Type=dbus services when the bus broker restarts
2026-09-01 02:12:52 +09:00
user.conf.in
core: make manager event loop rate limit configurable
2026-05-15 14:01:57 +09:00
varlink-automount.c
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-automount.h
core: implement AutomountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-cgroup.c
oomd: ruleset parsing
2026-05-18 21:42:56 +02:00
varlink-cgroup.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
varlink-common.c
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-common.h
shared: add exec_command_status_build_json() and ExecCommandStatus varlink type to common
2026-05-15 00:02:01 -07:00
varlink-dynamic-user.c
sd-varlink: export sd_varlink_set_sentinel
2026-03-29 20:32:15 +02:00
varlink-dynamic-user.h
tree-wide: Various forward header cleanups
2025-10-17 21:11:23 +09:00
varlink-execute.c
numa: add support for preferred-many and weighted-interleave policies
2026-06-28 13:40:07 +09:00
varlink-execute.h
Rename basic-forward.h, sd-forward.h, and shared-forward.h to forward.h
2026-07-15 02:18:05 +09:00
varlink-job.c
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-job.h
core: introduce io.systemd.Job interface with List, Cancel, and ClearAll methods
2026-05-19 11:05:55 +02:00
varlink-kill.c
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-kill.h
core: implement KillContext for io.systemd.Unit.List + tests
2026-04-15 23:37:55 -07:00
varlink-manager.c
process-util: introduce proc_get_timerslack()
2026-07-13 15:39:17 +02:00
varlink-manager.h
core: drop _manager() from new vl_method to shutdown
2026-03-26 15:21:10 +01:00
varlink-metrics.c
core: add all manager timestamps to metrics report
2026-07-02 17:01:02 +01:00
varlink-metrics.h
core/varlink-metrics: suffix metrics methods with _metrics
2026-02-16 09:44:57 +01:00
varlink-mount.c
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-mount.h
core: implement MountContext/Runtime for io.systemd.Unit.List + tests
2026-04-16 02:15:52 -07:00
varlink-path.c
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-path.h
core: implement PathContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 03:03:32 -07:00
varlink-scope.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-scope.h
core: implement ScopeContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:03 -07:00
varlink-service.c
core: add RestartRandomizedDelaySec= service option
2026-06-20 12:31:28 +02:00
varlink-service.h
core: expand ServiceContext and add ServiceRuntime for io.systemd.Unit.List
2026-05-15 00:02:01 -07:00
varlink-socket.c
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-socket.h
core: implement SocketContext/Runtime for io.systemd.Unit.List
2026-05-12 08:55:33 -07:00
varlink-swap.c
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-swap.h
core: implement SwapContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-timer.c
core: use JSON_BUILD_PAIR_FINITE_USEC_NON_ZERO() for "disabled when zero" usec fields
2026-05-12 08:51:26 -07:00
varlink-timer.h
core: implement TimerContext/Runtime for io.systemd.Unit.List + tests
2026-05-11 04:32:14 -07:00
varlink-unit.c
core: support CollectMode in Varlink StartTransient
2026-07-25 15:35:28 +09:00
varlink-unit.h
core: add io.systemd.Unit.StartTransient() to the varlink API
2026-04-27 13:49:24 +02:00
varlink.c
core: tag dynamic user userdb provider with dynamic uid/gid ranges
2026-07-12 23:09:01 +02:00
varlink.h
core/varlink: several cleanups for metrics varlink server
2026-02-16 09:44:58 +01:00