SymbX/systemd

T

Zbigniew Jędrzejewski-Szmek b835eeb4ec shared/seccomp: disallow pkey_mprotect the same as mprotect for W^X mappings (#7295 )

MemoryDenyWriteExecution policy could be be bypassed by using pkey_mprotect
instead of mprotect to create an executable writable mapping.

The impact is mitigated by the fact that the man page says "Note that this
feature is fully available on x86-64, and partially on x86", so hopefully
people do not rely on it as a sole security measure.

Found by Karin Hossen and Thomas Imbert from Sogeti ESEC R&D.

https://bugs.launchpad.net/bugs/1725348

2017-11-12 17:28:48 +01:00

CONTRIBUTING: stop mentioning "make check"

2017-08-21 09:47:07 +02:00

mkosi: configure mkosi.cache/ and mkosi.builddir/ explicitly

2017-11-10 19:00:06 +01:00

catalog: update french translation

2017-10-19 00:26:27 +02:00

tree-wide: use !IN_SET(..) for a != b && a != c && …

2017-10-02 13:09:56 +02:00

build-sys: use #if Y instead of #ifdef Y everywhere

2017-10-04 12:09:29 +02:00

factory: remove broken pam_limits

2014-07-30 15:21:54 +02:00

hwdb: Add ACCEL_MOUNT_MATRIX for HP Stream 8 (#7279 )

2017-11-09 15:38:34 +01:00

shared/seccomp: disallow pkey_mprotect the same as mprotect for W^X mappings (#7295 )

2017-11-12 17:28:48 +01:00

modprobe.d: expand drop-in to handle dummy0 as well (#7099 )

2017-10-16 17:17:47 +02:00

build-sys: use #if Y instead of #ifdef Y everywhere

2017-10-04 12:09:29 +02:00

po: update french translation

2017-10-19 00:26:52 +02:00

rules: run all persistent-input rules for rmi and i8042 (#7287 )

2017-11-10 10:32:51 +01:00

shell-completion

systemctl: clarify --global, --root and --runtime options (#7071 )

2017-10-12 08:14:25 +02:00

shared/seccomp: disallow pkey_mprotect the same as mprotect for W^X mappings (#7295 )

2017-11-12 17:28:48 +01:00

build-sys: use #if Y instead of #ifdef Y everywhere

2017-10-04 12:09:29 +02:00

units: add [Install] section to remote-cryptsetup.target

2017-10-13 08:03:16 +02:00

udev-rules: Permission changes for /dev/dri/renderD*

2017-11-08 08:21:31 -08:00

Merge pull request #7186 from poettering/track-deps

2017-11-12 16:14:41 +01:00

resolved: create private stub resolve file for /etc/resolv.conf integration (#7014 )

2017-10-24 15:28:41 +02:00

hwdb: switch meson to use ids_parser.py (#6964 )

2017-10-04 19:32:59 +02:00

core: make "tmpfs" dependencies on swapfs a "default" dep, not an "implicit"

2017-11-10 19:52:41 +01:00

login: support user-bus on dbus1

2015-08-31 18:12:37 +02:00

.dir-locals.el

meson: also indent scripts with 8 spaces

2017-04-25 08:49:16 -04:00

.editorconfig

editorconfig: add rule for meson.build files (#6671 )

2017-08-28 16:37:23 +02:00

.gitattributes

git: indicate that tabs are never OK in the systemd tree

2013-10-30 02:25:38 +01:00

.gitignore

gitignore: ignore output file of mkid (#7081 )

2017-10-13 10:17:43 +02:00

.mailmap

update .mailmap a bit more

2017-10-05 17:39:50 +02:00

.travis.yml

remove gudev and gtk-doc

2015-06-03 00:22:53 +02:00

.vimrc

vimrc: fix indentation logic for our docbook xml files

2016-04-29 12:23:34 +02:00

.ycm_extra_conf.py

ycm: update flag blacklist

2014-06-04 15:41:10 -04:00

CODING_STYLE

tree-wide: set SA_RESTART for signal handlers we install

2016-12-01 12:41:17 +01:00

configure

build-sys: add basic support for ./configure && make && make install

2017-07-18 10:05:06 -04:00

DISTRO_PORTING

DISTRO_PORTING: document that distros may/should change fallback DNS as well as fallback NTP if they wish

2017-07-24 11:49:16 +02:00

ENVIRONMENT.md

documentation: document nss-systemd's internal environment variables in ENVIRONMENT.md

2017-09-22 15:24:55 +02:00

HACKING

HACKING: add a short description of new unit tests

2017-11-04 21:15:57 +01:00

LICENSE.GPL2

…

LICENSE.LGPL2.1

licence: remove references to old FSF address

2012-12-17 11:41:31 +01:00

Makefile

build-sys: Fix Makefile wrapper for install target (#6548 )

2017-08-07 11:29:20 +02:00

meson_options.txt

udev-rules: Permission changes for /dev/dri/renderD*

2017-11-08 08:21:31 -08:00

meson.build

udev-rules: Permission changes for /dev/dri/renderD*

2017-11-08 08:21:31 -08:00

mkosi.build

mkosi: fix build script to use right sysvinit path

2017-11-10 19:00:06 +01:00

mkosi.default

mkosi: create .mkosi directory

2016-10-06 11:53:58 -04:00

NEWS

NEWS: Add note about udev changes for /dev/kvm, /dev/dri/renderD*, and /dev/kfd

2017-11-08 08:37:18 -08:00

README

build-sys: require libmount >= 2.30 (#6795 )

2017-09-15 14:47:57 +02:00

README.md

README.md: add CII Best Practices badge

2017-11-04 21:15:57 +01:00

TODO

update TODO

2017-11-12 14:27:25 +01:00

README.md

systemd - System and Service Manager

Details

General information about systemd can be found in the systemd Wiki.

Information about build requirements are provided in the README file.

Consult our NEWS file for information about what's new in the most recent systemd versions.

Please see the HACKING file for information how to hack on systemd and test your modifications.

Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.

When preparing patches for systemd, please follow our Coding Style Guidelines.

If you are looking for support, please contact our mailing list or join our IRC channel.