Lennart Poettering
14d10188de
journal: add FSPRG journal authentication
2012-08-16 23:58:14 +02:00
Lennart Poettering
a8e5f51484
journal: fix tag sequence number verification
2012-08-16 21:22:11 +02:00
Lennart Poettering
56e81f7ca8
journalctl: immeidately terminate on invalid seed
2012-08-16 21:00:47 +02:00
Lennart Poettering
b7c9ae91d1
journal: parse fsprg seed
2012-08-16 21:00:47 +02:00
Lennart Poettering
2dee23ebe0
journal: count number of entry arrays in header
2012-08-16 21:00:47 +02:00
Kay Sievers
45b51b6b71
keymap: fix map name reference
2012-08-16 21:00:06 +02:00
Zbigniew Jędrzejewski-Szmek
2737027897
journal: rename 'mmap' to 'mmap_cache' to appease gcc
...
warning: declaration of 'mmap' shadows a global declaration [-Wshadow]
2012-08-16 19:44:51 +02:00
Lennart Poettering
1137e6c73b
journal: fix variable initialization
2012-08-16 17:39:00 +02:00
Lennart Poettering
2a7273ef92
journal: fix unitialized var
2012-08-16 17:22:58 +02:00
Lennart Poettering
f5028bfaf0
journal: journal-send.h doesn't actually exist
2012-08-16 17:19:47 +02:00
Lennart Poettering
86adf873be
journal: verify structural consistency
2012-08-16 17:10:58 +02:00
Lennart Poettering
f9fffc31cd
journal: add color to verification progress bar
2012-08-16 17:10:57 +02:00
Lennart Poettering
fd5dc3204d
journal: verify compressed objects
2012-08-16 17:10:57 +02:00
Lennart Poettering
4da416aa20
journalctl: add --verify-seed= switch to specify seed value
2012-08-16 17:10:57 +02:00
Lennart Poettering
f59a5f6b87
journal: verify hashes only during actual verification, not all the time
2012-08-16 17:10:57 +02:00
Lennart Poettering
0284adc6a6
journal: split up journal-file.c
2012-08-16 17:10:57 +02:00
Lennart Poettering
f65425cbc4
journal: add superficial structure verifier
2012-08-16 17:10:57 +02:00
Lennart Poettering
beec008561
journal: implement basic journal file verification logic
2012-08-16 17:10:57 +02:00
Lennart Poettering
07cacf5f3b
conf-parser: make parsing exit status lists non-fatal
2012-08-16 17:10:57 +02:00
Lennart Poettering
16e9f408fa
journal: implement generic sharable mmap caching logic
...
instead of having one simple per-file cache implement an more
comprehensive one that works for multiple files and can actually
maintain multiple maps per file and per object type.
2012-08-16 17:10:56 +02:00
Martin Pitt
405053fafa
keymap: Add Sony VGN
...
https://launchpad.net/bugs/939868
2012-08-15 08:46:03 +02:00
Lennart Poettering
d046b20b11
conf-parser: simplify a few things by using set_ensure_allocated() rather than set_new()
2012-08-14 18:42:26 +02:00
Lennart Poettering
abdf799316
man: extend documentation for RestartPreventExitStatus= and SuccessExitStatus= a bit
2012-08-14 18:37:45 +02:00
Lukas Nykryn
96342de68d
service: add options RestartPreventExitStatus and SuccessExitStatus
...
In some cases, like wrong configuration, restarting after error
does not help, so administrator can specify statuses by RestartPreventExitStatus
which will not cause restart of a service.
Sometimes you have non-standart exit status, so this can be specified
by SuccessfulExitStatus.
2012-08-14 14:46:03 +02:00
Lennart Poettering
d98cc1f29f
journal: include tag object header in hmac
2012-08-13 21:52:58 +02:00
Lennart Poettering
b0af6f41ea
journal: add all objects we add to HMAC
2012-08-13 20:57:38 +02:00
Lennart Poettering
7560fffcd2
journald: initial version of FSPRG hookup
...
This adds forward-secure authentication of journal files. This patch
includes key generation as well as tagging of journal files,
Verification of journal files will be added in a later patch.
2012-08-13 20:31:10 +02:00
Lennart Poettering
8caf9d6836
umount: MS_MGC_VAL is so 90s
2012-08-13 16:30:10 +02:00
Lennart Poettering
5a7e959984
update TODO
2012-08-13 16:27:17 +02:00
Lennart Poettering
1e41be2015
nspawn,namespaces: make sure we recursively bind mount things in
...
We want to make sure that everything from the host is also visible in
the sandbox.
2012-08-13 16:25:03 +02:00
Lennart Poettering
aed5a52577
machine-id: properly mount transient machine ID read-only
2012-08-13 16:24:30 +02:00
Lennart Poettering
b4c59701f8
nspawn: unset a few unnecessary params to mount()
2012-08-13 16:23:31 +02:00
Lennart Poettering
68f160039e
update TODO
2012-08-13 15:39:25 +02:00
Lennart Poettering
ac0930c892
namespace: rework namespace support
...
- don't use pivot_root() anymore, just reuse root hierarchy
- first create all mounts, then mark them read-only so that we get the
right behaviour when people want writable mounts inside of
read-only mounts
- don't pass invalid combinations of MS_ constants to the kernel
2012-08-13 15:27:04 +02:00
Lennart Poettering
6f67a45d8e
nspawn: inherit mounts from real root, don't propagate mounts to real root
2012-08-13 15:23:10 +02:00
Lennart Poettering
f47fc35555
switch-root: remount to MS_PRIVATE
...
The kernel does not allow switching roots if things are mounted
MS_SHARED. As a work-around, remount things MS_PRIVATE before switching
roots.
This should be fixed in the kernel for good.
https://bugzilla.redhat.com/show_bug.cgi?id=847418
2012-08-12 01:31:03 +02:00
Kay Sievers
dbf61afb29
udev: export udev_device_new_from_device_id()
2012-08-10 19:56:57 +02:00
Simon Peeters
c516c8d17f
systemctl: fix issue with systemctl daemon-reexec
2012-08-10 18:08:22 +02:00
Dave Reisner
fd5b4ca11e
shared/utf8: mark char* as const
...
Avoids compiler warning:
src/shared/utf8.c: In function 'ascii_filter':
src/shared/utf8.c:278:16: warning: assignment discards 'const' qualifier
from pointer target type [enabled by default]
2012-08-10 17:59:39 +02:00
Dave Reisner
4bfa638d43
shutdown: recursively mark root as private before pivot
...
Because root is now recursively marked as shared on bootup, we need to
recursively mark root as private. This prevents a pivot_root failure on
shutdown:
Cannot finalize remaining file systems and devices, giving up.
pivot failed: Invalid argument
2012-08-10 17:59:33 +02:00
Lennart Poettering
8e4e8df5ea
id128: don't use C99 bool in public headers
2012-08-10 17:58:46 +02:00
Lennart Poettering
cee5e9a7ca
journald: never read the same kernel msg twice, and generate message when we lose one
2012-08-09 17:52:05 +02:00
Lennart Poettering
f7357f59c3
update TODO
2012-08-09 17:25:22 +02:00
Lennart Poettering
6f7ea7df77
man: document kernel journal fields
2012-08-09 17:12:07 +02:00
Lennart Poettering
b6a345143b
journalctl: support device node matches as shortcut
2012-08-09 17:05:29 +02:00
Lennart Poettering
5b4c61cd0b
journald: properly unescape messages from /dev/kmsg
2012-08-09 16:49:28 +02:00
Lennart Poettering
e7573d7fa9
journald: also parse kernel key/value fields and store them prefixed with _KERNEL_ as journal fields
2012-08-09 16:29:16 +02:00
Lennart Poettering
51abe64c85
journald: basic support for /dev/kmsg parsing
2012-08-09 15:57:24 +02:00
Lennart Poettering
4e818ef351
man: clarify the order of seats in sd_get_seats() is undefined
2012-08-09 15:57:01 +02:00
Lennart Poettering
0790b9fed4
update mailmap
2012-08-09 12:52:49 +02:00